About PW

PW helps you create complex passwords that you can easily access in seconds on any device, anywhere. So you can forget them and get on with your life.

How to use PW

  1. Enter a service name such as Google or Twitter.
  2. Then a password, it doesn't have to be long, the output is always 40 characters.
  3. PW hashes the password to make a theft proof unique password for that service.
  4. Copy the new password and use that as the password for that service.

Versions

PW supports two hashing versions. You can switch between them using the V1/V2 toggle.

V1 (SHA1)

The original version. PW takes the two inputs and runs them through a SHA1 hash:

SHA1("service" + "||" + "password" + "||")

Then uppercases every character at an even index position.

Example with service "facebook" and password "hackference":

762b679fA17b10D6Cc2d2194542d2235738b3e33

V2 (SHA256)

V2 uses SHA256 for a stronger hash, and injects a special character to satisfy more password policies:

  1. SHA256("service" + "||" + "password" + "||")
  2. Uppercase every character at an even index
  3. Inject a special character at position 3 (derived from the first hex digit)
  4. Truncate to 40 characters

Same example (service "facebook", password "hackference"):

FfD.07fCb7c1869AcA60d9d31D3C58bEaFc82D01

The first 15 characters are guaranteed to contain uppercase, lowercase, a digit, and a special character — satisfying most password policies.

V2 also shows a 3-emoji visual cue to help you quickly verify your output is correct.

Open Source

All of the PW code is open source under the MIT Licence.

github.com/hughhopkins/PW

blog & Twitter - @pwappio

<- back | privacy policy