SS64 Password Generator (Extra Strong 20 character version)

Using the same password for multiple email, shopping and social networking websites is risky, it means that a security breach at one website will compromise all your accounts, possibly even leading to identity theft.

So, the idea is that you memorise just one, reasonably long, secure main password and use that to generate a set of non-dictionary passwords. Copy and paste the new password(s) into the website and set your web browser to remember them.

All the websites get different passwords, but you only have to remember one!

Because the generator uses a one-way SHA-256 hash, knowing one password does not allow working backwards to discover the main password or any of the others. Using a different PC? you can re-generate the same set of passwords at any time by returning to this page and entering the same main password.

• For any website that's not on the list, just type the name into the 'Custom' box (the last one in the list) and press Generate.
• Using UPPER or lower case will produce different passwords, when using this for the first time it’s a good idea to use the 'Show Password' tickbox to check for any typos.
• Most websites will send a password reset via email, so set the password for that email account to something completely different, just in case you ever forget the main password!
• The mobile version can be added to your home screen on iPhone or Android, and will work even without an internet connection.
• To navigate this page using the keyboard, use the TAB and RETURN keys.
• There is also a 15 character version for any websites which don't yet accept 20 character passwords.
• If you are using Firefox with a password generator, you may wish to turn off the Firefox option to Suggest and Generate strong passwords. The Firefox password solution is rather limited because it will only work inside Firefox.

This password generator works using Javascript, entirely within the page, no data is ever passed back to my server. Notwithstanding this, it is a very good idea to save your own copy of this page. Zip file here. Keeping your own copy ensures that the password generator will still be available to you even if this website goes off-line. You can also View-Source and see exactly how the javascript works, copy it to a USB stick, email it to yourself, even upload it to your own website (it’s open source.) There are no dependent files, just save as a single HTML file.

Command-line version
Password security - a comparison of Password Generators
Are the SS64.com password generators a good approach? - StackExchange

“Password managers don't have to be perfect, they just have to be better than not having one” ~ Troy Hunt.

Credits

JavaScript implementation of the Secure Hash Algorithm, (SHA-256, ©Paul Johnston, distributed under the BSD License.) Inspired by Nic Wolff’s password generator. Mobile version by Jay van hutten

Simon Sheppard, Dec 2023

SS64.com/pass/