Neat implementation of the master password idea

Path	csiph.com!v102.xanadu-bbs.net!xanadu-bbs.net!feeder.erje.net!eu.feeder.erje.net!newsfeed.fsmpi.rwth-aachen.de!news-1.dfn.de!news.dfn.de!fu-berlin.de!uni-berlin.de!news.dfncis.de!not-for-mail
From	Torsten Bronger <bronger@physik.rwth-aachen.de>
Newsgroups	comp.misc
Subject	Neat implementation of the master password idea
Date	Tue, 02 Sep 2014 19:08:24 +0200
Organization	Phoenix Foundation
Lines	36
Message-ID	<87d2bevtkn.fsf@physik.rwth-aachen.de> (permalink)
Mime-Version	1.0
Content-Type	text/plain; charset=iso-8859-1
Content-Transfer-Encoding	8bit
X-Trace	news.dfncis.de wVvQzCbbEv3SDC6HK9A1XgbuWi3l6FNPsjPqUOu7uu/uCRAgigiMyA1Cs9
X-Orig-Path	wilson.bronger.org!not-for-mail
Cancel-Lock	sha1:9eHNHw7wO+3jNWORZ7eFY4rfUsE= sha1:3IkouYULHGbIj9O1tjoagespC0A=
X-PGP-Fingerprint	C5C8 D6E2 79D2 EFE9 8C0F 6D77 D5E3 CEFC 9F51 6B77
X-PGP-Affinity	will accept encrypted message for GPG
X-Home-Page	http://www.wikipedia.org/wiki/User:Bronger
X-Face	+wpw"\|jN2Fde\|7<r"A\7[g0RGE#"N'WgB\|46ohZy$RfV+Y!oH=FKMC>_<EQ_IdY;pJcjJrx {m$r$vTG>lKBa0\7!_6<ouwhB1\|a+k#?z597ims{Y+POGr7Z{,b]wj]6Z"PqUHzA2\\|m(:>suIE_m! x)'S9ytBu8tkt'k779jbzQ4o\|p+@H_DCrIdnKG]E*w
X-Binford	6100 (more power)
X-Accept-Language	de, en
Jabber-ID	torsten.bronger@jabber.rwth-aachen.de
User-Agent	Gnus/5.13 (Gnus v5.13) Emacs/24.4.50 (gnu/linux)
Xref	csiph.com comp.misc:4652

Show key headers only | View raw

Hallöchen!

A coupld of weeks ago, the German c't magazin published an article
about password management. (Unfortunately, it is not one of the few
that got translated into English
<http://www.heise.de/ct/heft/2014-18-Ein-neues-Konzept-fuer-den-Umgang-mit-Passwoertern-2284364.html>.)
The key point is the discussion of <http://masterpasswordapp.com/>.
Yesterday, I switched my passwords to it, and I am very much in awe
of the thing. The principle is quite simple and not even new -- the
Master Password App itself is around since 2011 -- but googling for
it yields suprisingly few hits.

While I don't want to say that this method superseds password
vaults, it is certainly the better method for me. Especially
because I like lightweight solutions: Install the program, enter
your master password, your name, and the service's name. Nothing
stored. No files to be synced or to be backuped or to be lost.

That said, the variants for non-Apple devices are rather
rudimentary. I hope for improvement, but the current status is okay
for me. I like that it's GPL'ed, and that the code is very short.
Besides, the algorithm is so well explained on the webpage that I
was (briefly) tempted to implement it in Python.

I really hope that developers pick it up and write browser plugins.
It would be nice to have fleshed-out standalone programs, too, maybe
with the possibility to store the services' names, the counters, and
the login names. Of course, then you have files again -- but only
for convenience, not for the functionality per se.

Regards,
Torsten.

--
Torsten Bronger Jabber ID: torsten.bronger@jabber.rwth-aachen.de
or http://bronger-jmp.appspot.com

Back to comp.misc | Previous | Next — Next in thread | Find similar | Unroll thread

Thread

Neat implementation of the master password idea Torsten Bronger <bronger@physik.rwth-aachen.de> - 2014-09-02 19:08 +0200
  Re: Neat implementation of the master password idea Rich <rich@example.invalid> - 2014-09-02 20:52 +0000
    Re: Neat implementation of the master password idea Torsten Bronger <bronger@physik.rwth-aachen.de> - 2014-09-03 08:31 +0200

csiph-web