topbanner_forum
  *

avatar image

Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
  • July 20, 2018, 05:23 PM
  • Proudly celebrating 13 years online.
  • Donate now to become a lifetime supporting member of the site and get a non-expiring license key for all of our programs.
  • donate

Author Topic: finding an old password program ...  (Read 1451 times)

barney

  • Charter Member
  • Joined in 2006
  • ***
  • Posts: 1,292
    • View Profile
    • Donate to Member
finding an old password program ...
« on: May 01, 2018, 05:40 PM »
Folk,
I'm trying to find a password program L used to have.  Of course, the name eludes me.  I've used it so long,it just became, "the password thingy."

Between hurricane Harvey, a house fire, and a recent theft from my place, I've lost all capability to replace it,unless I can find it online again. 

Reason I want it is because of the way it worked.  Enter text in a field, click,and it generates the same password, based upon that text,  every time.  As a result, I could enter text relevant to a aite and get my password to it w/o having to record the password anywhere.  Ran resident, so I always had quick access to it. 

It's several years old, so may not be available still, but I would dearly like to find it again.  Any help appreciated.

Dormouse

  • Supporting Member
  • Joined in 2007
  • **
  • Posts: 1,143
    • View Profile
    • Donate to Member
Re: finding an old password program ...
« Reply #1 on: May 01, 2018, 07:43 PM »
Hash programs do that. Is it possible it simply hashed the text?

barney

  • Charter Member
  • Joined in 2006
  • ***
  • Posts: 1,292
    • View Profile
    • Donate to Member
Re: finding an old password program ...
« Reply #2 on: May 01, 2018, 08:16 PM »
Hash programs do that. Is it possible it simply hashed the text?
Don't Think so, but I have been known to be wrong a time or three.  :o

Deozaan

  • Charter Member
  • Joined in 2006
  • ***
  • Points: 1
  • Posts: 8,468
    • View Profile
    • The Blog of Deozaan
    • Donate to Member
Re: finding an old password program ...
« Reply #3 on: May 01, 2018, 09:19 PM »
I know something like that has been discussed on this site before. I just can't seem to remember where.

I did find this: http://www.donationc....msg276252#msg276252

But that thread is really old and I'm pretty sure I remember having a conversation about it more recently than that. I'd guess you might have better luck in one of the LastPass (breach/vulnerability) threads.

wraith808

  • Supporting Member
  • Joined in 2006
  • **
  • default avatar
  • Posts: 9,550
    • View Profile
    • Donate to Member
Re: finding an old password program ...
« Reply #4 on: May 01, 2018, 10:14 PM »
Hash programs do that. Is it possible it simply hashed the text?

Chec
Hash programs do that. Is it possible it simply hashed the text?
Don't Think so, but I have been known to be wrong a time or three.  :o


Check at https://www.md5hashgenerator.com/ with a phrase that you know you used.  If it matches the 'password' then that might be what it's doing.  Of course, that's only MD5, so it might not match and that still be what it was doing.

* wraith808 shrugs

mwb1100

  • Supporting Member
  • Joined in 2006
  • **
  • Posts: 1,608
    • View Profile
    • Donate to Member
Re: finding an old password program ...
« Reply #5 on: May 02, 2018, 02:07 AM »
There's a chrome browser extension called hashpass: https://github.com/stepchowfun/hashpass

That repository has links to some other implementations (Android, python, etc) in case you were using this or some variation on it.

wraith808

  • Supporting Member
  • Joined in 2006
  • **
  • default avatar
  • Posts: 9,550
    • View Profile
    • Donate to Member
Re: finding an old password program ...
« Reply #6 on: May 02, 2018, 08:13 AM »
There's a chrome browser extension called hashpass: https://github.com/stepchowfun/hashpass

That repository has links to some other implementations (Android, python, etc) in case you were using this or some variation on it.


Nice!  Of note from the repo:

Suppose your secret key is bananas, and you're signing up for Facebook. Hashpass combines the current domain name and your secret key with a / as follows: www.facebook.com/bananas. It then computes the SHA-256 hash of that string. Then it hashes it again and again, 2^16 times in total. Finally, it outputs the first 96 bits of the result, encoded as 16 characters in Base64. In this example, the final output is sWwtmA9uA6X9SyXD. This result can be reproduced using the Python script near the bottom of this document.

Looks pretty nice.  Might start using that instead of the LastPass extension.  A bit more work, but worth it, I think.

A couple of warnings from them:
If an adversary has your secret key, they have access to all of your accounts. Hashpass never reveals your secret key. But we must make sure that an adversary can't determine it from the generated passwords.

-snip-

A common defense against these attacks is to add random bits to your key. This is called a salt, and it ensures you don't use the same key as anyone else. Most security software will automatically add a salt to your key and store it. Since Hashpass doesn't store anything, it cannot add a salt for you. It is up to you to pick a key with enough entropy to defend against dictionary attacks. Longer is better. More random is better. Don't use a single word. Definitely don't use bananas. Hashpass doesn't limit the size of your secret key—take advantage of this.

Deozaan

  • Charter Member
  • Joined in 2006
  • ***
  • Points: 1
  • Posts: 8,468
    • View Profile
    • The Blog of Deozaan
    • Donate to Member
Re: finding an old password program ...
« Reply #7 on: May 02, 2018, 09:45 AM »
Is it LessPass?

Keep in mind that, as f0dder mentioned in that thread (well, he linked to something written by someone else), these kinds of password generators have drawbacks that may not be readily apparent. So if you can find the one you used to generate your passwords, you may want to consider moving to a different password system.

If that's not the one, then as I said, perhaps you should check out the LastPass Alternatives thread.

Good luck!

cranioscopical

  • Friend of the Site
  • Supporting Member
  • Joined in 2006
  • **
  • Posts: 4,637
    • View Profile
    • Donate to Member
Re: finding an old password program ...
« Reply #8 on: May 02, 2018, 01:24 PM »
Any of these?

link to list

wraith808

  • Supporting Member
  • Joined in 2006
  • **
  • default avatar
  • Posts: 9,550
    • View Profile
    • Donate to Member
Re: finding an old password program ...
« Reply #9 on: May 02, 2018, 01:30 PM »
Is it LessPass?

Keep in mind that, as f0dder mentioned in that thread (well, he linked to something written by someone else), these kinds of password generators have drawbacks that may not be readily apparent. So if you can find the one you used to generate your passwords, you may want to consider moving to a different password system.

If that's not the one, then as I said, perhaps you should check out the LastPass Alternatives thread.

Good luck!

I'd forgotten about that one, and I'm the OP.  I think the concerns there are expressed in the blocks I quoted above, i.e. the lack of the salt, as it's not stored.  Been trying to find an alternative; xmarks' deprecation was more of a reason for me to find something rather than LastPass breaches.  Tried sticky password on recommendation from here; even bought a lifetime license.  But performance issues already have me regretting that decision.

wraith808

  • Supporting Member
  • Joined in 2006
  • **
  • default avatar
  • Posts: 9,550
    • View Profile
    • Donate to Member
Re: finding an old password program ...
« Reply #10 on: May 02, 2018, 01:32 PM »

rjbull

  • Charter Member
  • Joined in 2005
  • ***
  • default avatar
  • Posts: 2,973
    • View Profile
    • Donate to Member
Re: finding an old password program ...
« Reply #11 on: May 02, 2018, 04:08 PM »
A DuckDuckGo search for "windows program generate password text" turned up quite a few password-oriented hash programs and web sites, some with Android (or iStuff) apps as well.  E.g.:

« Last Edit: May 03, 2018, 04:07 PM by rjbull, Reason: Corrected URL of HashPass »

wraith808

  • Supporting Member
  • Joined in 2006
  • **
  • default avatar
  • Posts: 9,550
    • View Profile
    • Donate to Member
Re: finding an old password program ...
« Reply #12 on: May 02, 2018, 06:12 PM »
A DuckDuckGo search for "windows program generate password text" turned up quite a few password-oriented hash programs and web sites, some with Android (or iStuff) apps as well.  E.g.:




The last two have the same link.  Was that intentional or was one missed?

4wd

  • Supporting Member
  • Joined in 2006
  • **
  • Posts: 4,885
    • View Profile
    • Donate to Member
Re: finding an old password program ...
« Reply #13 on: May 02, 2018, 08:46 PM »
There's also vPass, web based hashed password generator, there are extensions and bookmarklet available, you can also self host.

I had one on my phone I was looking at that did the same thing, (it had a computer based version also but I can't think of it), decided that if I had to enter a master password to use any of these I might as well use a decent program that allowed me to store/do a lot more than just passwords, (ie. KeePass).

rjbull

  • Charter Member
  • Joined in 2005
  • ***
  • default avatar
  • Posts: 2,973
    • View Profile
    • Donate to Member
Re: finding an old password program ...
« Reply #14 on: May 03, 2018, 04:14 PM »
[...]
HashPass

The last two have the same link.  Was that intentional or was one missed?

It was a slip-up   :-[  Corrected above and in the earlier post.  Thanks for checking.

There appear to be numerous programs/services called "HashPass;" I haven't researched the relationships between them, if any.  As I said, quite a few are available for mobile devices, so if the OP finds his missing program and can find a mobile one that uses the same hash, he would have a convenient "backup."

Ancucu

  • Participant
  • Joined in 2018
  • *
  • default avatar
  • Posts: 5
    • View Profile
    • Donate to Member
Re: finding an old password program ...
« Reply #15 on: May 10, 2018, 05:55 AM »
I recommend you to try HashPass

4wd

  • Supporting Member
  • Joined in 2006
  • **
  • Posts: 4,885
    • View Profile
    • Donate to Member
Re: finding an old password program ...
« Reply #16 on: May 10, 2018, 09:49 PM »
And one more: MultiHasher

Not a password program but it will show text hashes using multiple algorithms at once which you try:

2018-05-11 12_48_04-Hash Text String.png