singe's SuperGenPass: A Free Bookmarklet Password Generator

A Better Password Generator

SuperGenPass is a different kind of password manager. Instead of storing your passwords on your hard disk or online—where they are vulnerable to theft and data loss—SuperGenPass uses a hash algorithm to transform a master password into unique, complex passwords for the Web sites you visit. There’s no software to install: SuperGenPass is a bookmarklet and runs right in your Web browser. And since it never stores or transmits your passwords, it’s ideal for use on multiple and public computers. It’s also completely free.

I did a full write-up on SuperGenPass and why I forked my own version in a blog entry.

How It Works

Step 1 Type your master password.

Step 2 Click on the SuperGenPass bookmarklet.

Step 3 Your password is generated and populated.

Differences between this and the original version

The original SuperGenPass can be found here. As the changes I wanted would require existing users to change their passwords, I made my own version for new users to avoid some problems in the original. Specifically the changes implemented in all versions listed below are:

The za.net and za.org domains are included as TLDs to prevent using the same password across all sites in those domains.
The default password length is set to 12 as per research advice from here.
Variable and function names are somewhat randomised to limit the chance of this exploit working on the bookmarklet.

Start Using SuperGenPass v2.02-singe

Please note, it is strongly advised you do not use the bookmarklet due to the reasons described here. Although, this bookmarklet adds some protection over the original.

Data URI - Set or Drag this link -> SuperGenPass to your bookmarks
Firefox, Safari, Opera - SuperGenPass - Right-click the link and add it to your bookmarks or drag it to your bookmarks toolbar.
Internet Explorer - SuperGenPass - Right-click the link and add it to your bookmarks or drag it to your bookmarks toolbar.
Mobile version - Use the mobile version when travelling, on public computers, or on mobile devices that don’t support bookmarklets.
Python version - original can be found at Michael Gorven's site.
J2MEE (Mobile Phone) version can also be found at Michael Gorven's Other Site. This includes the za.net/org fix, but not the 12 password default atm.

Other version's of SuperGenPass are available, but in the original format, not my forked version:

Android version - found here