Home

WARNING!
RndPhrase is still in developement! Anything before v1.0 is considered UNSTABLE.

What?

RndPhrase is a small Firefox add-on that will transform your everyday website passwords into highly secure domain specific passwords.

In short, RndPhrase is:

• Secure: no one can hack your account.
• Flexible: if a website requires special formatting of the passphrase, just configure it.
• Simple: annoy the user as little as possible.
• Trustworthy: open source and independent of servers storing your passphrase.

Why?

Just look at the recent passphrase dump from www.rockyou.com. RndPhrase helps you use unique passphrases for each domain. So even if one domain fails to secure your passphrase, the leaked passphrase will only be valid at their domain. Not anywhere else. All your other accounts are still secure.

How?

RndPhrase will generate a unique passphrase for each domain. This is done using your passphrase, a predefined seed which is constant over all domains and – not surprising – the domain name. Using these three values, a random password is generated and used in place of your regular password. But don’t worry: you don’t have to remember the random password. Just your regular password.

All you need to do is to prefix your regular everyday password with ‘@’ and it will be transformed into a randomly generated secure password before being transfered to the webserver.

So what do I do?

1. To install the add-on, simply grab the latest version of the source code from here:
   http://github.com/brinchj/RndPhrase-XPI/archives/master
2. Run the pack-script in “pack.sh” (this packs the source code into a Firefox add-on).
3. Now, “rndphrase.xpi” in Firefox to install the add-on.

You’re done! Go to some webpage and try it out!
Just prefix your password with ‘@’ and watch the transformation in action ;-)