About PW
PW helps you create complex passwords that you can easily access in seconds on any device, anywhere. So you can forget them and get on with your life.
How to use PW
- Enter a service name such as Google or Twitter.
- Then a password, it doesn't have to be long, the output is always 40 characters.
- PW hashes the password to make a theft proof unique password for that service.
- Copy the new password and use that as the password for that service.
Versions
PW supports two hashing versions. You can switch between them using the V1/V2 toggle.
In both versions the service name is lowercased and spaces are removed before hashing ("Face Book" becomes "facebook"). The password is used exactly as typed.
V1 (SHA1)
The original version. PW takes the two inputs and runs them through a SHA1 hash:
SHA1("service" + "||" + "password" + "||")
Then uppercases every character at an even index position.
Example with service "facebook" and password "hackference":
762b679fA17b10D6Cc2d2194542d2235738b3e33
V2 (SHA256)
V2 uses SHA256 for a stronger hash, and injects a special character to satisfy more password policies:
- SHA256("service" + "||" + "password" + "||")
- Uppercase every character at an even index
- Inject a special character at position 3 (derived from the first hex digit)
- Truncate to 40 characters
Same example (service "facebook", password "hackference"):
FfD.07fCb7c1869AcA60d9d31D3C58bEaFc82D01
The injected special character improves compatibility with password policies; the remaining characters are derived deterministically from the SHA256 hash.
V2 also shows a 3-emoji visual cue to help you quickly verify your output is correct.
Open Source
All of the PW code is open source under the MIT Licence.
