Please don't use that, the password derivation "algorithm" used there is extreme... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		palant on Nov 7, 2016 \| parent \| context \| favorite \| on: LessPass: sync-less open source password manager Please don't use that, the password derivation "algorithm" used there is extremely weak. I explained the issue a while ago here: https://palant.de/2016/04/20/security-considerations-for-pas... That blog post lists two extensions with hashing algorithm "custom" - that's SuperGenPass.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact