0

I tend to use same 2-3 passwords for all sites and want to change that but want to make sure I standardize my new approach as well.

Looking at password hashing and I know very little other than what I have been reading last few hours.

Is there any sites that use secure crypto with salting that I can just save the page for offline use?

I might be doing this wrong so that is second part, if my approach is flawed can someone suggest a better way.

was thinking of using custom password + salted user name + domain.com = new hash then using 20 char starting with the forth inward.

Any info would be wonderful.

closed as off-topic by Nifle, Ƭᴇcʜιᴇ007, bwDraco, Kevin Panko, a CVn Nov 25 '14 at 14:37

This question appears to be off-topic. The users who voted to close gave this specific reason:

  • "Questions seeking product, service, or learning material recommendations are off-topic because they become outdated quickly and attract opinion-based answers. Instead, describe your situation and the specific problem you're trying to solve. Share your research. Here are a few suggestions on how to properly ask this type of question." – bwDraco, a CVn
If this question can be reworded to fit the rules in the help center, please edit the question.

  • Are you trying to come up with an algorithm for generating passwords? – Nifle Nov 23 '14 at 19:47
  • No not at all, this is for personal use. Want to stop using same password all over the internet but want a good way to remember them. Thought if I used a formula and had a page saved for offline use I could recall a password if I forgot and make new ones as I sign up for new services. Read that sha1 was better than md5 but then read saying both were bad. So very confused on what would work for me. – user392545 Nov 23 '14 at 19:47
  • I understand it's for personal use as I have a hard time understanding why anyone else would complicate things like this when pwgen exists. – Nifle Nov 23 '14 at 19:50
  • Didnt know that was a thing til just now, will look into it but still curious about the hashing. – user392545 Nov 23 '14 at 19:51
  • Ahh. Your edit of your comment explains what you meant. I would say it's looks good enough and md5 should be godd enough for this use. – Nifle Nov 23 '14 at 19:52
1

It sounds like you're looking for an algorithm to have your passwords be derived from the site they're for, but that's not really necessary, nor a good idea. Use a password manager to keep track of your password for each site and you won't need a way to derive it algorithmically. I believe Password Safe has a good reputation.

Diceware is a decent way to choose random passwords that you can actually remember (so you won't have to consult your password manager every time you log in).