Secure Password Generator
Monday, September 29th, 2008 | Author: Kow
For most of my password generating in windows I use a tool from pctools.com. You can get the tool here. An excerpt from the website is appropriate…
Password Generator - is an offline version of the web-based Password Generator which allows you to securely and easily create passwords locally on your own PC.
Really the only part of the tool I use but it also includes other tools…
Password Checker - a new feature that lets you check the quality and strength of a password. By entering your password in the checker it will run a series of tests on the password to indicate how strong it is, and therefore how easy it may be to guess or crack.
Could be useful, but I do most of my pentesting in linux…
Password Revealer - works with Internet Explorer to reveal saved password that you have entered in web-forms but may have subsequently forgotten or lost. Simply bring up the hidden password in Internet Explorer, highlight it, and Password Revealer will tell you the saved password.
Handy! I was able to reveal passwords when I wasn’t an admin. I’m smiling.
The web version of the password generator is here. I recommend the encrypted connection.
Tuesday, 30. September 2008
and what solutions would you suggest for linux? The online tool still works… mostly… Any bruteforcer could be used I suppose. Being lazy I’ve used pwgen as it was in apt at the time. Oh and yeah, what does the Kow recommend for password storage and recovery?
Thursday, 2. October 2008
@Mark - For CLI, APG(Automated Password Generator) is my favorite option. It’s part of the stable tree in Debian/Ubuntu and it produces output similar to pctools. The main difference is that it takes user input to generate the passwords.
Don’t know about CLI storage…
For X, Seahorse comes with Ubuntu 8.04 installed by default and will reveal passwords you have saved(like in evolution and your wlan prefs…you know you shouldn’t but you do for convenience:>). Revelation is another option for gnome users that specifically provides password generation and strength testing at the gui.