DEV Community

Discussion on: How to generate thousands of usernames and halfway decent passwords with Bash💯💯

Collapse
 
raddevus profile image
raddevus • Edited

This is very interesting to me. I've created an app which allows you to draw your password. It generates a SHA-256 based password and it remembers the site's password requirements (add an uppercase, add a special char, max length).
https://dev-to-uploads.s3.amazonaws.com/uploads/articles/rupsl8v12d4bdrz0tbk8.jpg
I wrote it as FOSS (Fully Open Source Software - get all source at GitHub) using ElectronJS so it runs on all platforms (Windows, Mac, Linux).

You can even get the app directly from the Win10 store : microsoft.com/en-us/p/cyapass/9pfd...
And you can also get it (For Linux distros) in the snap store: snapcraft.io/cyapass
check it out and see what you think.
If you're wondering about the details of how it works, check out my LinkedIn article.

Collapse
 
thormeier profile image
Pascal Thormeier

That's a really interesting tool, will definitely check that out :) How does the generation out of the pattern work?

Collapse
 
raddevus profile image
raddevus • Edited

Every pattern you create generates a mathematical value -- based upon the line segments that are drawn. that mathematical value is used to salt your SiteKey value. Together the two values are used to generate a unique SHA-256 hash + any password requirements (add uppercase, add special char(s), maxlength).
Also, if you draw a pattern that has four segments, no matter which order you draw them in will generate the same mathematical value. That way if you draw a pattern in one order then later in another order you get the same mathematical value for the salt value. Thanks for asking