anything

Author Topic: Add 2nd modifier field  (Read 8277 times)

Grey Knight

  • Guest
Add 2nd modifier field
« on: December 28, 2007, 02:32:23 PM »
The current modifier field can be used for:

1) Handling expiring passwords, by allowing a version number etc.

2) Adding a salt

But doing both is difficult with just one field. I have passwords that expire, so have the need to version passwords, and also have extreme paranoia over rainbow tables, and also want to be able to add a salt. So, I'd like a 2nd "modifier" field. What exactly they are labeled is not of great concern to me.

Thanks,
Shawn

Offline Eric H. Jung

  • grimholtz
  • Administrator
  • *****
  • Posts: 3353
Re: Add 2nd modifier field
« Reply #1 on: December 28, 2007, 02:41:52 PM »
I think that can be arranged. That's pretty straightforward. But can you explain how two fields will provide more security than one? Can't you separete your version number and salt with a space or other delimiter in the existing field?

Offline tanstaafl

  • Moderator
  • *****
  • Posts: 1363
Re: Add 2nd modifier field
« Reply #2 on: December 28, 2007, 02:52:52 PM »
I think that can be arranged. That's pretty straightforward. But can you explain how two fields will provide more security than one? Can't you separate your version number and salt with a space or other delimiter in the existing field?

Yeah, I think this makes more sense... and adds a small layer of difficulty in reproducing for someone trying to reproduce your settings.

Offline Grey Knight

  • Normal Members
  • *
  • Posts: 1
Re: Add 2nd modifier field
« Reply #3 on: December 28, 2007, 08:09:41 PM »
I think that can be arranged. That's pretty straightforward. But can you explain how two fields will provide more security than one? Can't you separate your version number and salt with a space or other delimiter in the existing field?

I could do both in one field, but the use case is awful -- I'm pretty sure I can't get my wife to deal with that! And one of my goals here is to push the entire household to adopt PasswordMaker.

FWIW, I also figured out a nice way to make the salt. https://www.grc.com/passwords.htm is a great source for keys, but they are impossible to reproduce (duh). Instead I can use PasswordMaker to create an n character "password" for the virtual site "passwordmaker.salt" & set the rest of the parameters to something easily recalled. Thus when "away from home" I can still quickly & easily recreate the salt.

Thanks,
Shawn
« Last Edit: December 28, 2007, 08:17:21 PM by greynite »

PasswordMaker Forums

Re: Add 2nd modifier field
« Reply #3 on: December 28, 2007, 08:09:41 PM »