search

mwgg / passera

[UNSUPPORTED] A small tool to turn any entered passphrase into a strong secure password, allowing you to easily use different strong passwords for different websites without storing them
Other
62 stars 17 forks source link

Reversed engineering #11

Open cicina opened 7 years ago

cicina commented 7 years ago

Hello, Im not sure how this works but it is probably vulnerable to reversed engineering attack. Someone just could figure out how this works and possibly get our passwords if we type website name or similar..
I was thinking It would help if we could have our unique system by modifing algorithm. There is milion possibilities out there so we could affect how script will create passwords so reverse engeneering is out of business. Just consider my idea please and if I am wrong please explain why is that. I dont really understand your script but I do use it and I like it but once someone find out I am using this, attacker is free to study code....

mwgg commented 7 years ago

Hi,

This is potentially possible, but the attacker would somehow need to know your initial passphrase. If we keep them complex enough, our passwords would remain safe.