

Send your tips to gostips@gmail.com.

March 4, 2007

SuperGenPass - Simple Password Generator




How will you use it?
* type the username and the master password when you log in
* click on the bookmarklet [extra-click]
* click on "Populate" [extra-click]
* submit the form



  1. Thanks for the great find. Also this bookmarklet can be stored in Google Bookmarks and we can access it anywhere.

  2. Your quote:

    "And, best of all, you can use a single password for all the sites that need one."

    I wouldn't do that. I am using the predecessor of SuperGenPass as well, still I don't use it for _really_ important stuff like e-banking.

    In the unlikely case that your master password gets detected (e.g. by a keyboard sniffing trojan on a compromised computer) - then all of your passwords are known. That small risk is acceptable for all my throwaway and social media accounts, but not for the critical stuff, for which I use a separate password. (note: this also implies that I don't access that really important stuff on machines that I don't trust, e.g. in internet cafés...).

  3. There is a similar script for the greasemonkey firefox extension called "password composer" that I have been using for around a year.

  4. Why not just use a password manager?

    Keeps your passwords safe, organized and accesible 24/7. Most have a password generator incorporated too if you want one.

    Mine: https://www.passpack.com

    There are others too. Shop around.

  5. The problem with standalone programs (as I;ve just discovered which is why I'm looking at this) is that they're not platform independent. My WM6 smartphone won't run the password generator I've been using for years - it's generated dozens of passwords I use every day.

    Now I'm going to have to switch but I only want to do it once, so making it browser based is a reasonably sure way of achieving that independence, even if I switch to Linux for the desktop (which is not unlikely).

  6. This is vulnerable to brute force dictionary attack. If anyone had access to one of your generated password (like so many admins might), they could find out your master password (if it wasn't a random combination of letters and digits). So don't use your dog's name as a master password.

  7. SuperGenPass has a serious security flaw when used as a bookmarklet.