CryptoPass

Generate different passwords from single master password using cryptographically strong method (PBKDF2 with SHA-256).

什麼是CryptoPass?

CryptoPass是由https://codingrobots.com開發的Chrome擴展程式,該擴展的主要功能是“Generate different passwords from single master password using cryptographically strong method (PBKDF2 with SHA-256).”。

擴展截圖

screenshot
screenshot

下載CryptoPass擴展crx文件

下載CryptoPass擴展crx格式的文件,手動將Chrome擴充功能安裝到瀏覽器中,也可以將crx文件分享給朋友,輕鬆安裝Chrome擴充功能。

擴展使用說明

                        IMPORTANT: Please understand the risks of password generators: https://crypto.stackexchange.com/a/5691/291

Create strong passwords for different websites (or anything else) using a single secret key. If you lose your password for a website, you can regenerate it if you remember your secret key, username, and address of the web site. There's no need to remember or store multiple passwords if you can derive them from your master key.

How to use
----------------

1. Make up a secret master key (at least 16 characters for better security) and remember it. Keep it secret! You will use it every time you need to generate a password.

2. Click on the extension icon.

3. Enter your username for the website. It can be anything, you just need to remember it.

4. Enter URL of the website (it is prefilled).

5. Click a button: "Show" to generate and show password, or "Fill" to generate password and try to fill form on the current webpage with username and password (pressing Enter does "Fill").


Examples
--------------

For example, your secret key is: "my super secret" (do not actually use this, think of something better and longer)

Username: tester
URL: google.com

Your generated password will be: Juq5MzGrXU7zivT13MHdpXGzq 
Use it for your account.

Username: somebody_else
URL: twitter.com
Generated password: ydPFMc7isTa1mBlFOFiYSmjXV

Every time you enter "my super secret" plus "somebody_else" as username and "twitter.com" as URL, you will get exactly the same generated password as above.


Algorithm
--------------

password = base64(pbkdf2(secret, username@url))

PBKDF2 uses SHA-256 and 5000 iterations. Cuts password to specified length (25 by default).


Source code: https://github.com/dchest/cryptopass/

This extension doesn't use any web services, everything is done on your computer.

Warning for reasonably paranoid: there is a security risk in how Chrome handles autoupdates of extensions: if somebody gains access to Google servers or my developer account, they could put backdoor in this extension and re-upload it. You would get this modified version, and Chrome would not notify you. If you want to avoid this risk, use the source code linked above to install the extension on your own.

---

Unofficial Android versions (the author of this extension is not responsible for these apps):

CryptoPass: https://play.google.com/store/apps/details?id=krasilnikov.alexey.cryptopass

Simple CryptoPass: https://play.google.com/store/apps/details?id=no.haitech.simplecryptopass                    

擴展基本資訊

名稱 CryptoPass CryptoPass
ID hegbhhpocfhlnjmemkibgibljklhlfco
官方網址 https://chromewebstore.google.com/detail/cryptopass/hegbhhpocfhlnjmemkibgibljklhlfco
簡介 Generate different passwords from single master password using cryptographically strong method (PBKDF2 with SHA-256).
檔案大小 22.24 KB
安裝次數 343
目前版本 1.12
更新時間 2019-07-23
上架時間 2019-07-23
評分 4.63/5 共 19 次評分
開發者 https://codingrobots.com
付費類型 free
擴展官網 https://github.com/dchest/cryptopass
說明頁面URL https://github.com/dchest/cryptopass/issues
支援的語言 en
manifest.json
{
    "update_url": "https:\/\/clients2.google.com\/service\/update2\/crx",
    "name": "CryptoPass",
    "version": "1.12",
    "manifest_version": 2,
    "description": "Generate different passwords from single master password using cryptographically strong method (PBKDF2 with SHA-256).",
    "icons": {
        "128": "icon_128.png",
        "64": "icon_64.png"
    },
    "permissions": [
        "activeTab"
    ],
    "browser_action": {
        "default_title": "CryptoPass",
        "default_icon": "icon.png",
        "default_popup": "popup.html"
    },
    "content_security_policy": "default-src 'self'"
}