Hashapass/Hashapass web

<x id="START_PARAGRAPH" /><x id="START_SPAN" />Caution!<x id="END_SPAN" /> Most systems will keep a history of recently-typed commands. You probably do not want to use the above template directly, but rather inside of a shell script that will prompt you for your master password.<x id="END_PARAGRAPH" /><x id="START_PARAGRAPH" />Simon Elmir contributed just such a script:<x id="END_PARAGRAPH" />

<x id="START_PARAGRAPH" />You don’t have to store your generated passwords anywhere: just remember the master password and the parameter, and type them here.<x id="END_PARAGRAPH" /><x id="START_PARAGRAPH" />If you want to access your generated passwords even when you're not connected to the Internet, or in the rare event when this website isn't available, you can install the <x id="START_LINK_1" />bookmarklet for Firefox and Chrome<x id="END_LINK" />, the <x id="START_LINK_2" />widget for Mac OS X<x id="END_LINK" /> or the <x id="START_LINK_3" />gadget for Windows<x id="END_LINK" />; you can also <x id="START_LINK_4" />download the app for Android phones<x id="END_LINK" />.  They are compatible with this website (the same combination of master password and parameter will produce the same generated password).<x id="END_PARAGRAPH" />

<x id="START_DIV" /><x id="IMAGE_1" /><x id="END_DIV" /><x id="START_H2" />Gadget for Windows Vista Sidebar<x id="END_H2" /><x id="START_PARAGRAPH_1" />Get easy, safe offline access to Hashapass directly on your Windows Vista desktop by downloading our Gadget for Windows Vista Sidebar!<x id="END_PARAGRAPH" /><x id="START_PARAGRAPH_2" /><x id="START_LINK" /><x id="IMAGE_2" /><x id="END_LINK" /><x id="BREAK" /><x id="START_LINK" />Download<x id="END_LINK" /><x id="BREAK" /><x id="BREAK" /><x id="BREAK" /><x id="START_SPAN" />Microsoft Windows Vista or later is required.<x id="END_SPAN" /><x id="END_PARAGRAPH" />

<x id="START_H2" />About Hashapass<x id="END_H2" /><x id="START_PARAGRAPH" />Hashapass is a password generator which uses a mathematic formula to create new passwords based on a "master" password and a parameter.<x id="END_PARAGRAPH" /><x id="START_PARAGRAPH" />The formula is calculated in the safety of your web browser, without any information being transmitted over the Internet.<x id="END_PARAGRAPH" /><x id="START_PARAGRAPH" />The generated password is computed as the first 8 characters of the Base64 encoding of HMAC-SHA1(master password, parameter).  HMAC-SHA1 is defined on byte arrays, so only the lowest-significant byte of the Unicode code point for each character of the master password and parameter is used in the calculation of the HMAC-SHA1.<x id="END_PARAGRAPH" /><x id="START_PARAGRAPH" />There's no secret to this formula: <x id="START_LINK_1" />SHA1<x id="END_LINK" />, <x id="START_LINK_2" />HMAC<x id="END_LINK" /> and <x id="START_LINK_3" />Base64<x id="END_LINK" /> are all well-known algorithms, which guarantees that other people can implement products that are compatible with Hashapass.<x id="END_PARAGRAPH" />