Social Icons

Saturday, June 2, 2018

Chrome: this extension tells you if your password has been hacked


Based on the online service of haveibeenpwned.com, the PassProtect extension automatically checks to see if your passwords are not in past data leaks. And this while ensuring the confidentiality of the password checked.
Are the passwords you use really secure? Do not they already circulate among the pirates? The question arises because, in recent years, the identifiers of billions of user accounts have been siphoned into unsecure databases to be resold under the mantle, including the darknet.

For the past few months, security researcher Troy Hunt has been offering an online service on his website at www.ibibitpwned.com to find out if your password has been compromised, based on a list of 500 million passwords. from past data leaks. It's nice, but not very practical everyday. The Okta editor has now developed PassProtect, an open source Chrome extension that allows you to do the same verification, but in an automated way. Whenever you enter a password, it checks that it is not in Troy Hunt's database. If so, it will display an alert.



Regarding the verification procedure, there is no need to worry. Your passwords are never sent as is, nor to Okta or Troy Hunt. The extension calculates a SHA-1 password fingerprint and then sends to the server of haveibeenpwned.com only the first five characters of that fingerprint. The underlying API responds with a list of matching fingerprints. The final check is then done on the client side. This principle, called "k-anonymity", preserves the confidentiality of this highly sensitive data.

Those who do not have confidence, and who have a hacker soul, can also download the 500 million hashed passwords directly from the website and have them checked locally and by hand.

Okta is not the only one to use this verification service. As Troy Hunt points out in a blog note, it has also been implemented in the 1Password password manager, the EVE gaming platform or the Kogan online reseller website. Now you will not have any excuse to use a bad password.


Download :   PassProtect for Chrome

No comments:

Post a Comment

Category Of Mobile Courses

Actualités (644) Adsense (1) Affiliation (1) Algebraic Topology (1) Algorithmic (1) all-news (30) Android (5) Android App (8) Android app without code (4) Android Apps (167) Android Development (4) Android download (2) Android OS (3) AngularJS (1) Automata theory and formal language (5) C programming (5) Category and Functor (8) CMS (3) Computer Glossary (18) Create Mobile App With Ionic Framework (2) CSS (2) CSS-Cascading-Style-Sheets (4) Developpement Java (13) Differential Geometry (1) Django-Python-Framework (8) dropshiping (26) Earn Money by Internet (4) Emplois (23) Framework php (2) Fraud (2) HTML (7) Java For Beginners (10) Javascript (12) Kotlin Programming Language (8) Kotlin For Mobile Android (1) Linux Download (2) Marketing (5) Mobile (3) Mobile Courses (4) Mobile Marketing (4) MoneyGram (1) News (721) Node.js (5) Open Source (1) Photoshop (1) Protect Computer (1) Python (32) Python BeautifulSoup (1) Python For Data Science (2) Python-Books (6) Python-DVD-Training (1) Python-Exercises (130) Python-Framework (1) Python-IDE (1) Python-Modules (1) Python-pdf (2) Python-pyQt (1) Référencement (2) Script PHP (2) Security (6) SEO (1) Snipping Tool: Faq (1) Social Networks (1) Source Code (1) Statistics With SPSS (2) Surveillance Software (1) Travail à domicile (6) Tutoriels php en vidéos (2) Tutoriels-MySql (6) tutoriels-php (19) Utilitaires (1) VPS (1) Web Hosting (1) Webcam (1) Webmarketing (11) Western Union (1) Windows 10 (1) Windows 7 (4) Windows 7 Faq (2) Windows 8 (1) Windows Accessories (1) Windows Download (8) Windows Drivers (1) Windows Fonts (1) Windows Power Shell (2) Windows Registry (2) Windows Security (18) Windows Software (2) Windows Spyware (2) Windows utilities (3) Windows Virus (2) Windows Vista (3) Windows Wireless (1) Windows xp (1) Wordpress (1)
 

Sample text

Sample Text

 
Blogger Templates