Skip to main content
11 events
when toggle format what by license comment
Feb 9, 2022 at 0:09 comment added kebabdubaj I thought that DRNG would let me generate arbitrary length passwords
Feb 8, 2022 at 23:01 comment added mentallurg If you don't care about password resetting, then your approach is almost fine. I don't see any reason to have step 2, DRNG. The hash has already high entropy. Why do you need a DRNG? It will not make the result worse, but it adds complexity without giving any benefits.
Feb 8, 2022 at 18:49 comment added mentallurg @kelalaka: Yes, using password manager is the most reasonable approach. But the OP as well as the linked question hopes that it might be possible to have a nice function that gives you passwords for all your web sites, so that you need to remember a single" password only. In the linked answer I explain why it is impossible on the long run. And yes, if one wants to remember a *single password only, one should use password manager.
Feb 8, 2022 at 6:20 comment added kelalaka Use a password manager?
Feb 8, 2022 at 2:06 comment added mentallurg This is actually a duplicate of this question. See there the problems you may face. Briefly: What if you need to change a password for one of 100 web sites? A single generator will not work.
Feb 8, 2022 at 1:04 review Close votes
Feb 27, 2022 at 3:03
Feb 8, 2022 at 1:03 answer added Paul Uszak timeline score: -2
Feb 8, 2022 at 0:42 comment added DannyNiu SSL/TLS does pretty much what you describe - deriving working keys from master key obtained from handshake; except they work with binary keys instead of textual passwords. This question is otherwise (as I see it) a request for scheme analysis, thus off-topic.
Feb 8, 2022 at 0:26 history edited kebabdubaj CC BY-SA 4.0
added 5 characters in body
S Feb 7, 2022 at 23:51 review First questions
Feb 8, 2022 at 14:11
S Feb 7, 2022 at 23:51 history asked kebabdubaj CC BY-SA 4.0