Password Management Against Versatile Attacks

Abstract

Passwords play a very critical role in authentication, information and security of web applications. Securing and managing passwords is a significant problem for most of the people in the modern world. As the number of accounts increases managing and securing of the passwords gets complicated. As a consequence, many users tend to adopt weak password management schemes which can significantly reduce the security of the systems. Prior to the research it confirms that security experts recommend Password managers to help users generate, store and enter strong unique passwords. In this research, after checking Password habits of users accounts, it allowed us to understand the password habits of users according to sensitive data of their account, and also revealed some critical issues associated with password choice. So we propose PasswordAgent(password hashing mechanism).It utilizes both salt repository(salt-sequence of randomly generated bytes) and a browser plug in to secure logins with strong passwords. Password hashing is a technique that allows user to remember simple low entropy passwords and have them hashed to create high-entropy secure passwords. PasswordAgent is less vulnerable to offline attacks, and it provides stronger protection against password theft.