HashPass Icon
HashPass allows a user to input a password or any text and generate a hash from it.
Generally a secure password is hard to remember so users tend to opt for easy to remember passwords. These passwords are also easy to crack. This app aims to address that by allowing the user to use hashes in place of their passwords on various sites.
Example: a user may have a password such as “computer” (a bad one) that would be easily cracked in a dictionary attack.
Where as the md5 hash generated from computer is
df53ca268240ca76670c8566ee54568a which is not easy to guess or dictionary attack.
There are currently four algorithms available in the app. MD5 , SHA1 , SHA256 & SHA512.
This allows the user to use the same password for four different sites and a different hash for each.
For your banking or email you could use the SHA512 hash of your chosen password . In the computer example the hash is
922d076069b1df893fc010b7a6d2aa55c7c4c5d194f163394a4c864de5754131c17bfa94ac166
7f56b5181cc7eca5dc3a09444caee6eecf16114926bb29f7e79
The hashes are automatically copied to the clipboard for convenience. This allows you to paste it into an app such as facebook or an email app.
If a database is compromised which is insecurely storing the passwords and your passwords (your generated hash) was obtained . The other three sites (with different hashing algorithms) would be safe.
Using hashes as passwords also makes an attack more computationally expensive as each string (sequence of characters) has to be hashed first before submitting it as the password. Also that factor is multiplied by 4 as the attacker does not know which algorithm you may have chosen.
You could also paste the output of the initial hash as the input with different functions for more options. Just remember the algorithms and the order you chose if you do.
I have also made an open sourced command line desktop version which is written in python and can be downloaded from https://minus.com/mBDxG4GLu/
This app respects users privacy and no data is recorded about the user. The Internet permission is required to serve the ads.
Technologique Park 