About the Password Regenerator

Why use a password regenerator?

Most of us cannot possibly remember long and complex passwords for every Internet site or online account that we use. Most of us have dozens if not hundreds of login credentials for a dizzying array of websites. Remembering all those passwords is basically impossible. As a result, many people use the same password across many different online sites. Using the same passwords online is very insecure and dangerous. If one site is hacked, and your login and password is stolen, the hackers could use your stolen credentials to hack into any, or even all, of the other online sites that you use using the same username and password.

Despite the danger, people often use the same passwords across many different web sites which is much like using your house key as your car key, as your office key, as your safety deposit box key. Too many people use weak passwords too. Weak passwords are those that are too short or use simple words and perhaps numbers only. In other words, they are too short and are not sufficiently randomised.

The following text is randomised: NIflTn8Rq3Gx6Sc while this text: mybrowndog99 is not randomised. Guess which password is better at keeping the hackers out.

Possible Solutions

One solution is to use multi factor authentication (MFA) whenever it is available. However, MFA is not always available, it can be cumbersome to use, and it is not without its own weaknesses.
Another solution is to use a password vault service (such as LastPass). These are also cumbersome and worse still, they can be hacked which can expose all of your vaulted passwords and logins. Lastpass itself has been hacked more than once!

Our Solution

Our strong solution uses a password regenerator. We take a strong master password (that you choose) concatenated with a user chosen identifier/site key and create a unique non reversible hash that is specific for each of your own particular sites that you login to. The password hash is long (32 characters) and very complex (it uses many non alphanumeric characters as well as numbers and letters).

Each time that you need to login to a particular website, you reuse your chosen master password and then supply the unqiue identifier for each particular site and regenerate the same password for that site. You can do this for as many online sites or purposes as you need.

The most important benefit of using the password regenerator is that every regenerated password for every site is different (as well as being long and complex)! In other words, this tool gives you a very simple and secure method for using different and very strong passwords on every web site or on line account that you have. You only need one 'master key' password. And then use individual 'site keys' or 'identifiers' that are so much more secure while easier to remember because they can be simple text like 'check account', 'amazon' or 'facebook'.You can use any site key that you choose.

Some Examples

Step 1 - Pick your master password This password will never change. It should be a complex password and reasonably long. The regenerator requires the master password to be longer than 8 characters.
Step 2 - Enter the site identifier When you create a login for a website, you will use the domain name (without the .com part) as the site identifier.
Step 3 - Press the Regenerate button Use the password that is generated for the site that you are logging in to.
Example: Logging into Facebook:
The user's chosen master password is always "Br0KenJ@w". The site identifier is 'facebook'. So the regenerated password to be used with facebook will be: 368707W!de2184S%925cc1X^c1985dE&
Example: Logging into Linkedin:
The user's chosen master Password is always "Br0KenJ@w". The site identifier is 'linkedin'. So the regenerated password to be used with linkedin will be: 8060fcW!bc87ddS%33d4f9X^f98117E&
Example: Logging into Chase Bank:
The user's chosen master Password is always "Br0KenJ@w". The site identifier is 'checking'. So the regenerated password to be used with Chase will be: ad5872W!ee6330S%c789cdX^cdd489E&
Annual password changes Each year, we change the password generator algorithm so that passwords will be different. So you need to roll over your account passwords each year. When the new year rolls over, you need to use the previous years regenerator to get the existing/old password for a site and then use the current year password regenerator for the new password.
For example when rolling over from 2023 to 2024, use the 2023 password regenerator to obtain the current password then use the 2024 password regenerator to obtain the new password. Change the password for each site that you login to. This is something you will want to do in January. Once you change the password for most of your commonly used sites you will use the 2024 password regenerator until the next year rolls over.

More Questions?

Does the password regenerator store passwords? No password information is stored at all. All of the password calculation is done within your browser on your computer. Nothing that you type into the regenerator web page goes anywhere onto the Internet. Your master key and site keys never leave your computer. They stay right where your computer is. All of the calculations are done within your browser on your computer. And your browser does not store or save the master password or identifiers at all.
How does the password regenerator work? The password regenerator generates (and regenerates) passwords that are unique for each web site that you use. When you initially set up your account on a site, you will use the password generator to set up the initial password. And each time you visit the site, you will use the password regenerator to recreate the same password (by typing in the master key and the specific site key). Each time you generate the password, you will copy and paste that password into the web site password field.
Can you give me a longer explanation? This password regenerator is an easy way to use your own special 'master key' and special 'site key' to produce many different complex (and long) passwords. Each password is a special unique value that is calculated using a combination of the master key and the site key and the combination is then 'hashed'. The hashing produces complex, unique and long passwords. This means that you need to remember three things. First, you must remember your unique master key. Second, you must remember each unique site key which identifies the login site. Third, you must also remember your login ID for each site. This page will regenerate the complex and long password which you will copy and paste into the site password and then login. Most sites use your email address as the user id. So that part is easy. Note that this is not a password vault. Password vaults actually store your passwords. If your password vault gets hacked, you're in big trouble. This password regenerator does not store anything at all. It simply recalculates your complex passwords using your master key and site key identifiers.
What is the Master Key? The master key is your secret. You use the same master key on each visit here. Never write down or store this password anywhere. It is your secret key password for passwords!
What is the Site Key? The site key is some unique text that applies to the specific site or purpose for the required password. It might be 'facebook' or 'cisco.com' or 'check account'. You can use any site key that you choose (for each site) but you must use the same site key for each specific site each time that you return to the password regenerator. That means, you need to create your own mental system for remembering site keys. Most of the time, you can use the domain name of each site. You can also drop the .com like 'facebook' or 'yahoo' or 'chase'. Our recommendation is to use the domain name but just drop the .com (the TLDR) so that "facebook.com" becomes simply "facebook". It is safe to write down a list of these site keys and keep them available for yourself. But it is better to come up with a system to remember them without writing them down or storing them anywhere. Whatever you do, don't write down actual passwords!
Don't write down logins and passwords!Incredibly foolish as this is, you can actually buy a log book for keeping a record of your web site logins and passwords. HERE is an example. This is a really, really bad idea. So don't do that! We know our tool takes a bit of getting used to and it isn't perfect but putting all of your logins and passwords into a book is a truly terrible idea. Please do not do that!
WANTEGRITY

Copyright © 2024 Wantegrity, Inc. All rights reserved.