jPwdHash is an open-source command line tool to generate domain-specific passwords based on the provided domain (URL) and a password. It implements the method devised by group of researchers at the Stanford Security Labs (you can read more about it here: https://crypto.stanford.edu/PwdHash/).
Simply type the URL for the domain you intend to generate a hashed password like this:
$ jPwdHash --url netflix.com
You'll then be asked to input a password and you'll get your hashed password. You use this hashed password on the website in question to register and login instead of the actual password.
You can also use the shortened version of the url parameter, the above example would then look like this:
$ jPwdHash -u netflix.com
Note: jPwdHash is also provided as a jar file, if you prefer to use that one directly you would
execute the above command like this: java -jar jPwdHash.jar -u netflix.com
Please consult the official webpage for of jPwdHash for an explanation on how it improves the security of your passwords and other important details.
Get the latest version of the application here: https://github.com/pedronveloso/jPwdHash/releases
or read the topic below to build it yourself.
If you're using Arch Linux you can get the jpwdhash package from AUR.
If you'd like to build the application yourself instead of downloading the pre-compiled one here's how to do it:
- Clone the repository
- Go to the root of the project and execute
gradle build - You can then get the compiled app from
/build/distributions/
jPwdHash is provided under the GNU GPLv3 license, consult the LICENSE file for details about it.
Main Developer: Pedro Veloso (Twitter: @pedronveloso)
Parts of the source code were adapted from the PwdHash for Android project, available here: https://github.com/phw/Android-PwdHash