• Welcome to TechPowerUp Forums, Guest! Please check out our forum guidelines for info related to our community.

RFC on my new little project.

Status
Not open for further replies.

Kreij

Senior Monkey Moderator
Joined
Feb 6, 2007
Messages
13,817 (3.46/day)
Likes
5,524
Location
Cheeseland (Wisconsin, USA)
#1
I'm writing a little strong password generating program for the fun of it
Here's a pic of the GUI.


I'm looking for input on options and rules to make it useful for variety of purposes.

Thanks!!
 
Joined
Feb 26, 2008
Messages
4,870 (1.35/day)
Likes
681
Location
Joplin, Mo
System Name Ultrabeast GX2
Processor Intel Core 2 Duo E8500 @ 4.0GHZ 24/7
Motherboard Gigabit P35-DS3L
Cooling Rosewill RX24, Dual Slot Vid, Fan control
Memory 2x1gb 1066mhz@850MHZ DDR2
Video Card(s) 9800GX2 @ 690/1040
Storage 750/250/250/200 all WD 7200
Display(s) 24" DCLCD 2ms 1200p
Case Apevia
Audio Device(s) 7.1 Digital on-board, 5.1 digital hooked up
Power Supply 700W RAIDMAXXX SLI
Software winXP Pro
Benchmark Scores 17749 3DM06
#2
interesting enough, we use these programs to generate user passwords for users on secret / top secret networks when they create an account.

You should try to sell this to the united states army special operations command when you are done with it.
 

Fourstaff

Moderator
Staff member
Joined
Nov 29, 2009
Messages
9,379 (3.16/day)
Likes
2,101
Location
Home
System Name Asus K50-X5DAB \\ Orange!
Processor Athlon QL-65 2.2Ghz \\ 3570K
Motherboard Laptop \\ ASRock z77 Extreme4
Cooling Laptop \\ H100i
Memory 1x1GB + 1X2GB \\ 2x4Gb 1600Mhz CL9 Corsair XMS3
Video Card(s) Mobility Radeon HD4570 512mb \\ Zotac 660Ti OC 2Gb
Storage 250Gb \\ Samsung 840 250Gb + Toshiba DT01ACA300 3Tb
Display(s) 15.6" 1366x768 \\ LG 22EA53VQ
Case Laptop Chassis \\ NZXT Phantom 410 Black/Orange
Power Supply Power Brick \\ Corsair CXM500w
#3
I was thinking about using "seeds", so you can remember your password, and store your "seed" somewhere safe. Whenever you forget your password(s), retrieve the seed, run it pass the program, and insta retrieve! Much safer than storing your actual passwords somewhere. But that sounds like another project.
 

Kreij

Senior Monkey Moderator
Joined
Feb 6, 2007
Messages
13,817 (3.46/day)
Likes
5,524
Location
Cheeseland (Wisconsin, USA)
#4
I was thinking about using "seeds", so you can remember your password, and store your "seed" somewhere safe. Whenever you forget your password(s), retrieve the seed, run it pass the program, and insta retrieve! Much safer than storing your actual passwords somewhere. But that sounds like another project.
That's what I had planned. An encrypted file to store the data, unecrypted in the GUI.
That's easy enough to do.

But right now I'm just look for input on options/rules. The ones I have show in the GUI are some that I've run across when having to make passwords for various things, and I'm interested in if anyone has seen other options or rules that were required when creating a password.
 
Joined
Dec 14, 2005
Messages
1,760 (0.40/day)
Likes
91
Location
Calverton, New York
System Name Current rig
Processor i7-6700k
Motherboard Asus Z710-Deluxe
Cooling Noctua NH-U9S
Memory 32GB Ripjaws V 3200
Video Card(s) Asus GTX 980 Ti Strix OC 6GB
Case rosewill L4412
Power Supply seasonic 1kw
#5
How about setting the frequency of uppercase/undercase/numeric and special characters. How many of each do you want to use. Also, an option to set "X" amount of normal characters before a special character is used.
 

Kreij

Senior Monkey Moderator
Joined
Feb 6, 2007
Messages
13,817 (3.46/day)
Likes
5,524
Location
Cheeseland (Wisconsin, USA)
#6
Thanks, CStall.

I was going to make it so there would never be more that 3 consecutive, similar "types" of characters, but your suggestion got me thinking.
I'm not sure exactly how to implement that as I don't want so many options that the user could potentially make the password less secure through less than judicial use of the options. :/

I'm also going to make the minimum password length 6, as a password length of 3 would not be considered "strong" by any means. :D

I added the "Hex Only" option in case someone wants to generate a WEP password.

I should probably use Unicode characters for localization purposes too.

I also was going to allow the user to modify the generated password before accepting it.
That too could potential create a less than secure password, but I can do a "strong check" and warn them before actually committing the password.
 
Joined
Feb 26, 2008
Messages
4,870 (1.35/day)
Likes
681
Location
Joplin, Mo
System Name Ultrabeast GX2
Processor Intel Core 2 Duo E8500 @ 4.0GHZ 24/7
Motherboard Gigabit P35-DS3L
Cooling Rosewill RX24, Dual Slot Vid, Fan control
Memory 2x1gb 1066mhz@850MHZ DDR2
Video Card(s) 9800GX2 @ 690/1040
Storage 750/250/250/200 all WD 7200
Display(s) 24" DCLCD 2ms 1200p
Case Apevia
Audio Device(s) 7.1 Digital on-board, 5.1 digital hooked up
Power Supply 700W RAIDMAXXX SLI
Software winXP Pro
Benchmark Scores 17749 3DM06
#7
If you can implement a dictionary text file to check against, one of our requirements demands that our passwords do not spell a word, phrase, or a name.
 

Kreij

Senior Monkey Moderator
Joined
Feb 6, 2007
Messages
13,817 (3.46/day)
Likes
5,524
Location
Cheeseland (Wisconsin, USA)
#8
Hmmm ... I should probably then prompt for the username for the site also to check for easily broken derivations of the username.
Maybe I'll just take away the ability to modify the generated password. :D
The odds of the generated password being anything like the username or a real word would be virtually none.
 

Zyon

New Member
Joined
Mar 18, 2011
Messages
264 (0.11/day)
Likes
29
Location
Australia
System Name Computernamehere/Computernamehere2/Computernamehere3
Processor i5-2500/Athlon 6000+/C2D Q6700
Motherboard P67A-UD3R/M2N-SLI Deluxe/P5K-Deluxe
Cooling Stock/Hyper212+/Unknown Coolermaster
Memory Patriot PC3-10666 2x2/A-Data PC2-6400 4x1/OCZ PC2-8500 4x1
Video Card(s) MSI GTX580 Lightning/2x Gigabyte GTS450 OC 1GB/2x HIS HD4870 512MB
Storage Seagate 1TB/Samsung 500GB/Seagate 1TB
Display(s) Samsung BX2440
Case V4 Black/Mystique 631 Silver/Soprano VX
Audio Device(s) WTF is a sound card?
Power Supply Corsair HX650/Antec Earthwatts 650W Green/None
Software Windows 7 Home/Professional/Professional
Benchmark Scores TBA
#9
Or, you could give it a message and tell them to 'remember the password and guard it with your lives' :D
 

Kreij

Senior Monkey Moderator
Joined
Feb 6, 2007
Messages
13,817 (3.46/day)
Likes
5,524
Location
Cheeseland (Wisconsin, USA)
#10
The passwords will be stored in an encrypted file, so they only have to remember one key to access them. Of course, if they forget the key they're up the perverbial creek without a paddle. :D
 
Status
Not open for further replies.