XKCD-password-generator
PasswordPusher
Our great sponsors
| XKCD-password-generator | PasswordPusher | |
|---|---|---|
| 10 | 74 | |
| 1,294 | 1,686 | |
| - | - | |
| 6.2 | 9.8 | |
| 15 days ago | 4 days ago | |
| Python | Ruby | |
| BSD 3-clause "New" or "Revised" License | Apache License 2.0 |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
XKCD-password-generator
-
What's SysAdmins' new go to password generator now?
Either use a password manager or a tool like xkcdpass.
- SysAdmins' favorite password generator is finally back!
-
github.com: genpassaas
Kinda like this, but personally we using in production /usr/share/dict/american-english-insane that create even more secure phrases that can be less than 6 words.
-
What password generators does everyone use now since passwordgenerator plus is gone?
I use https://github.com/redacted/XKCD-password-generator.
- Having issues downloading mentalist
-
I Hate Password Rules
My word list contains 7227 words apparently, so 12.82 bits per word
https://github.com/redacted/XKCD-password-generator
Not sure how many bits a "good" password should be nowadays.
PasswordPusher
-
MSP Wants Admin Credentials Sent via Email with multiple Recipients
I 100% agree that it's shitty from a security standpoint BUT EQUALLY it is not your job to be the security guy for the MSP. Your job is to provide those credentials as safely as possible. (https://pwpush.com/) is your best bet.
There's also the Password Pusher website: https://pwpush.com/
-
Our customer's IT guy sent us a password via email
What about something like password pusher? https://pwpush.com/ What is your guys opinions on this?
-
Web-app solution to store messages behind a password?
Yes, also https://pwpush.com/ as a service for the quick start!
-
Hemmelig.app - Self hosted secret sharing application
Looks a lot like https://pwpush.com/ do you know what this project has compared to Password Pusher?
- Share Password and destroy it
-
Web fingerprinting is worse than I thought
(1) A tool like for example https://github.com/pglombardo/PasswordPusher self-hosted offers a way for the user to detect, whether their password has been seen before.
(2) Are you missing the point? "That is how it usually works." -- So why then send a password to an e-mail inbox, like I said a location often controlled by third party and often one with no good record of respecting privacy, if you can completely avoid that?
(3) But your so called security is observed often enough to result in inaccessible accounts. "Extra strict" usually means something along the lines of "oh, now I am going to require your phone number, to send you a message on a second channel to make sure" or similar things. Again circumventing consent, because now it becomes an extortion, extracting more personal data, so that the user can access their account. You so called security makes for a real shitty user experience and punishes the user for ever switchting their browser.
-
Guys please recommend some interesting docker containers. What I currently have is seems to be ok, but I'm missing solutions that will make me get into it more. I know those long Reddit listings of self-hosted apps, but I haven't found many interesting things there.
An application to securely communicate passwords over the web. Passwords automatically expire after a certain number of views and/or time has passed. Track who, what and when. https://github.com/pglombardo/PasswordPusher
What are some alternatives?
PrivateBin - A minimalist, open source online pastebin where the server has zero knowledge of pasted data. Data is encrypted/decrypted in the browser using 256 bits AES.
yopass - Secure sharing of secrets, passwords and files
rage - A simple, secure and modern file encryption tool (and Rust library) with small explicit keys, no config options, and UNIX-style composability.
onetimesecret - Keep passwords and other sensitive information out of your inboxes and chat logs.
Bitwarden - The core infrastructure backend (API, database, Docker, etc).
bitwarden_rs - Unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs [Moved to: https://github.com/dani-garcia/vaultwarden]
magic-wormhole - get things from one computer to another, safely
tell-me-everything - A very simple flask app for anonymous users to post something on **The Wall**
Denyhosts - Automated host blocking from SSH brute force attacks
Wazuh - Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
Pen Test Tools - Homebrew Tap - Pen Test Tools
Hemmelig.app - Keep your sensitive information out of chat logs, emails, and more with encrypted secrets.