Password generator for small and medium enterprises
I am just wondering if there is any need for the password generator in the small and medium enterprises. I mean the generator similar like this one ( created & designed by me ) http://anolog.net/
which converts easy to remember wikipedia articles to strong passwords. See the image attached below. The easy to guess and sometimes easy remember password are usually the weakest link in the enterprise security. The idea is to deploy such simple password generator in the enterprise infrastructure and ask/force employees to use it. The differences between the public version and enterprise versions may be following:
- all cryptography computations are executed at the backend, not in the user's browsers;
- administrator sets secret salt, required password length, set of characters;
- administrator selects hash algorithms ( SHA2 & SHA3 are used in public version ) as well password stretching algorithm;
- there is a counter to cryptographically "increment" the password to make periodic password change convenient and safe;
- optionally password generation statistics might be available;
- optionally passwords may be verified if they are generated by the generator;
The general principles of using such generator: - users are allowed to use any wiki article as well as combination of many articles; - users are allowed to write down the password components ( wiki articles combination ); - generated passwords are neither tied to any login, email nor any account information is stored in the generator; Any feedback and thoughts are welcome! Best Regards, Tarkusso