Since it seems like people are using the same passwords half across the internets and maybe even their own computer. :(
I would like to see a gnome applet that:
1. You use a master password. (One good, strong password to remember!) Even if this password is compromised, and thanks to the use of "description values", if this password is "lost", it do not threaten all your passwords.
You could even have an extra description values like "sausage"/"flower"/"badger", to get even higher security.
2. Generates your password through algorithms and descriptions on what you use it for. Site url/file/tags/etc. Plus possibilty to use extra personal values for heightened security.
3. _No storage_ of any passwords on disk. (No need for backup) Only descriptions is stored in a encrypted file. (See solution #2)
4. Should be easy to generate new strong passwords.
5. Should be able to autocomplete.
6. Should be useful when using another computer (Public/job) by use of "online" script, which is run locally from browser. Which is achieved by masterpassword + descriptions (as in the url+username/other values, for the site to access) As in:
http://passwordmaker.org/passwordmaker.html
How it could work:
The password to use are generated by a master password and "description values" (url/username/tags/file/date/etc.) -> one way hash algorithm (
http://en.wikipedia.org/wiki/Cryptographic_hash_function )= message digest(
http://www.rsa.com/rsalabs/node.asp?id=2176 )=password to use. READ ON PLEASE! :D
Should the descriptions part of the application be possible to backup? So that autocomplete etc. also gets backed up.
Thoughts:
However, this _do not_ protect one self from keyloggers/people looking over ones shoulder/social engineering, however it does protect you from one password compromised = the whole of your digital existence is compromised.
The use of loads of descriptions involved generating the password, could make it hard to remember all the values that generates the password. Could be a big problem when using a public terminal..
