This started when I decided to learn python by rewriting one of my old perl scripts in python. randstring is a script to generate a random string of characters. I use it sometimes to generate passwords, but password strings or random characters usually can't be remembered, at least not easily. Passwords like that can be useful at times. You need to store them in an encrypted password safe.
I have another script that generates more memorable passwords. Some people I know, have found it useful. There are always some passwords you need to be memorable. For instance your login password and the password to your password safe. randword generates a bunch of words from a dictionary. XKCD style passwords, if you like. In the process of examining it, I rewrote it in both perl and python, fixed some bugs and added some features.
In general a bunch of words can be much easier to remember and can be just as difficult or far more difficult to crack. I like to generate a bunch and choose a few at random. 4 or 5 or more words is OK. Hint: misspellings are good but not if you can't remember what you did. Passwords on websites are a bit mad at the moment with complicated rules, like: "there's an illegal character" or "you must have an upper-case letter and a number", or "that password is too short", or "too long" etc.
New features of randword:
The links below include word lists from Chaucer, Shakespeare, Mark Twain, and the linux word dictionary.
This is my original blog post on the scripts with all the links to the scripts and associated stuff.
Links:
randstring.pl randstring.py
randword.pl randword.py
some word lists
tarred and zipped archive of scripts and wordlists
I have another script that generates more memorable passwords. Some people I know, have found it useful. There are always some passwords you need to be memorable. For instance your login password and the password to your password safe. randword generates a bunch of words from a dictionary. XKCD style passwords, if you like. In the process of examining it, I rewrote it in both perl and python, fixed some bugs and added some features.
In general a bunch of words can be much easier to remember and can be just as difficult or far more difficult to crack. I like to generate a bunch and choose a few at random. 4 or 5 or more words is OK. Hint: misspellings are good but not if you can't remember what you did. Passwords on websites are a bit mad at the moment with complicated rules, like: "there's an illegal character" or "you must have an upper-case letter and a number", or "that password is too short", or "too long" etc.
New features of randword:
- There's a couple of new options about output format, like camel case.
- randword can use any dictionary or word frequency lists as long as they have a fairly simple format - ie at least a word and an optional number at the start of each line.
- randword can also take a bunch of text and create dictionaries of words that it can use to generate random passwords.
The links below include word lists from Chaucer, Shakespeare, Mark Twain, and the linux word dictionary.
This is my original blog post on the scripts with all the links to the scripts and associated stuff.
Links:
randstring.pl randstring.py
randword.pl randword.py
some word lists
tarred and zipped archive of scripts and wordlists
No comments:
Post a Comment