PasswordMaker Forums
Firefox/SeaMonkey/Mozilla/Netscape/Flock Browser Extension => Help and Support => Topic started by: John Doe on October 30, 2007, 12:08:42 AM
-
I can't figure out how to use different character sets and/or password lengths for different sites. For example some sites have annoying password rules, like digg.com for example, where they only allow letters and numbers. And other sites might limit the password length. I like to use the full character set and a long password in my default settings, and only weaken either criteria if necessary for these sites.
I read that I needed a separate account for these sites, but the "new account" option is grayed out so I can't select it.
Please help, thanks!
-
Update: I figured it out. I made a new group called "Restrictive Sites" and populated it with accounts for those sites. But it doesn't seem to be working. For example youtube.com has a 15 character password limit, but I use 16 in my defaults. So I made an account for youtube.com and limited the password to 15 characters, but when I go to youtube.com and populate the password field, it enters 16 characters.
Isn't it supposed to recognize when I am at youtube.com, and limit the generated password to 15 characters? This is what I need.
-
Just a caveat: please don't let youtube.com become a red herring; I realize you can get away with more than 15 characters when changing your password. I just used it as an example. My main point and question is that I need to be able to restrict the password criteria for certain sites, and have PasswordMaker automatically know when I am there.
Thanks!
-
Argh! I keep thinking of more to add, sorry!
I don't want to use auto-populate; I want to type in my username and right-click the password field for manual generation each time, but I still need it to know that I need a restricted password.
-
Did you enter any URL patterns? If not, then PasswordMaker won't know to use that account.
-
Did you enter any URL patterns? If not, then PasswordMaker won't know to use that account.
In my youtube.com account, I have "Use the following text to calculate the generated password:" set to "youtube.com" - isn't that enough?
I didn't mess with the pattern section because it says that's for auto-population, and I don't want to auto-populate.
The help section scares me; I don't want to leave myself open to phishing. Do I really need to create a pattern for all these problem sites? Ugh.
-
OK, I've set my wildcards to:
*://*domain.tld/*
It works, but is that secure enough? For example, would I be at risk from something like this: http://attacker.com/domain.tld/index.html
Thanks
-
I should have wrapped that link in CODE tags, sorry.
-
Only if you check the autopopulate checkbox does it actually auto populate fields.
And for wildcards, the most secure you can be is if you have no * before the first / after the domain.
-
Only if you check the autopopulate checkbox does it actually auto populate fields.
And for wildcards, the most secure you can be is if you have no * before the first / after the domain.
I don't have one between the slash and the domain...
I'm thinking there's really no way to be safe from phishing unless you specify the exact domain of every login screen. :-\
-
I meant avoid a wildcard pattern like this: http://*.example.com/*
Note the * before the domain? So unless you want to learn some RegEx, the best thing to do is figure out which domains would need to be defined.
-
I can't figure out how to use different character sets and/or password lengths for different sites. For example some sites have annoying password rules, like digg.com for example, where they only allow letters and numbers. And other sites might limit the password length. I like to use the full character set and a long password in my default settings, and only weaken either criteria if necessary for these sites.
I read that I needed a separate account for these sites, but the "new account" option is grayed out so I can't select it.
Please help, thanks!
I have a similar gripe with Passwordmaker. It's those sites that don't allow punctuation. I had already changed my passwords on many sites before realizing that there are so many that don't allow punctuation.
Is there a way to set Passwordmaker to make this simpler? From what I gather, I have to create a new account for every site that won't allow punctuation. (Besides changing my defaults setting in passwordmaker, which would mean I'd have to change my passwords all over again.)
Or should I bite the bullet and change my default settings to not include punctuation?
-
Creating accounts seem to be the best way to go right now.
-
Try as I might, I have been unsuccessful in creating a changed password for one site only, leaving others all the same. I've created a new account with the particular site in it, and gone to the extended tab and added a modifier. The next time I try to log in to that site, PWM uses the Default settings, not the new account settings.
Whatever I try either doesn't change the PW for the intended site, or changes them all. Is there a step by step procedure you can point me to?
Dave
-
Are you creating URL Patterns?
-
No. At the top of the dialog box in Account Specific Settings there's the site I want to change after "Use the following text to calculate the generated password". Do I have to add a pattern?
-
Dave,
Time to go back to the basics...
Passwordmaker is not something you can just install and start using. You must read about how it works - and if you want take advantage of its advanced features, that will take more than just 5 or 10 minutes...
Have you seen the wiki?
http://passwordmaker.org/
It isn't 100% complete, but it has enough information to answer your problem.
Here is a good place to start for the Firefox version:
http://tinyurl.com/3eyffj