Oxyfish

Just ran across an incredibly cool password management tool. Basically it uses a “master” password and the domain name of the site you are visiting to create a unique password for each site. The best part: it is calculated (using a modified MD5 hash) in the Javascript – so no web refresh, no transmission of your master password. And it runs entirely from a bookmarklet, with automatic discovery and fill-in of the password field. Or you can use the mobile version to gen a password on the fly. The only minor issue I can see is that if your master password is compromised, then the attacker could get access to all your sites. But that’s not really a problem, because most people use the same password almost everywhere anyway .

Thanks to JohnK for the pointer.

This entry was posted on Monday, May 22nd, 2006 at 4:49 pm and is filed under Technology. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.