Password generation using a hashing algorithm

Password generation using a hashing algorithm

0 vote

avatar

The password generation templates and options are cool and all, but one of the things we have done for many years is to set our local admin accounts' credentials using the passgen utility that was originally published in Steve Riley and Jesper Johansson’s book Protect Your Windows Network. The main idea of the tool is to create a unique password by using an identifier and a passphrase. The identifier is just the computer name. The passphrase is the variable part, but by using the same password when setting the local admin accounts for all servers, what you get is unique local admin passwords for every server that can be derived even if DPS is inaccessible. For extra credit, we use different master passwords based on the type of account (local Admin, SQL sa accounts, service accounts, etc.), so the ability to select from an array of passwords from a saved source in the vault would be nice.

How this tool could work:









In summary, the random password gen tool you have is cool, but I think customers would also benefit from a predictable password gen tool, like passgen or SuperGenPass (web-based approach to the same challenge).

All Comments (2)

avatar

Hello,
This is an interesting idea. I will add this to our todo list and try to do more research.

Regards

David Hervieux

avatar

To expand on this, this is my recommended approach:

In the Password Generator, add an additional Mode: "LessPass"

This should come with the fields:
[text] Site
[text] Login
[password] Master Password (with RDM lookup ellipses)
[Generate] [checkbox] Advanced Options
If Advanced Options is checked, show additional options
[a-z] -A-Z] [0-9] [%!@]
Length [16]+/- Counter [1]+/1

The algorithm for the generation can be found on LessPass's Github site. (github /lesspass/lesspass)

Effectively, you are mimicking the interface on lesspass's web page (lesspass dot com) for ease of reference by us admins.

Although passgen has treated us well, it's lack of open source or binary availability makes me think lesspass is the better approach. Let me know what you think, thanks!

-Paul