[Discuss] Password app

[bogstad at pobox.com (Bill Bogstad)]

On Fri, Oct 10, 2014 at 7:08 PM, Mike Small <smallm at panix.com> wrote:
> Matthew Gillen <me at mattgillen.net> writes:
>>
>> Because you don't have to keep a that "password database file" on 5
>> different backup devices (and keep it updated on all your backup
>> copies every time you add one).  It's certainly not a security
>> improvement. It's a usability improvement at the expense of security.
>>
>
> What happens when you need to change a site's password? You use a new
> master pass phrase. Now you either have to go change all your passwords
> on each site or keep track of which were generated from the old and
> which the new master passphrases. Is that not how it would work?

The algorithm apparently has a per site password counter:

http://masterpasswordapp.com/algorithm.html

Of course, the current state of the counter is now something which has
to be shared
between devices.   Nor sure how that works.   I suppose you could also
modify the name of the site as well.  Instead of "comcast.com" use
"myf***ingisp" as the site name.

Bill Bogstad