Generate secure passwords you can actually remember!
Find a file
2019-11-22 17:23:39 -05:00
dist Added support for air-gapped operation. #11 2018-05-12 14:12:06 -04:00
fonts Added support for air-gapped operation. #11 2018-05-12 14:12:06 -04:00
src Added in <wbr> tags prior to merging in #12. 2018-04-10 22:02:03 -04:00
tests Removed unused Qunit stuff. 2017-11-09 21:44:57 -05:00
wordlist Fix for #14. Replaced "yo-yo" with "cheetah". 2019-06-16 16:31:24 -04:00
.gitignore Added webpack 2017-11-08 21:17:55 -05:00
.travis.yml Added caching of node_modules/ directory. 2017-11-12 18:07:55 -05:00
CODE_OF_CONDUCT.md Added Code of Conduct 2018-04-09 20:26:26 -04:00
CREDITS.md Credit for #12 2018-04-10 22:16:03 -04:00
dice.css
dice.jpg Added dice graphic 2015-11-10 23:50:30 -05:00
dude-chill-just-chill.gif Updated chill. 2017-07-09 13:39:10 -04:00
favicon.ico Added a favicon 2015-11-10 23:41:21 -05:00
go-sync-to-s3.sh Added script to upload to S3 2018-05-04 21:45:30 -04:00
index.html s/attack/attacker/ 2019-11-22 17:23:39 -05:00
LICENSE
package-lock.json Newer versions 2019-11-22 17:06:15 -05:00
package.json Added testing 2017-11-09 22:07:24 -05:00
README.md Tweaked development instructions 2019-11-22 17:06:27 -05:00
robots.txt Added robots.txt 2018-05-12 12:43:04 -04:00
starter-template.css
webpack.config.js Moved main.js into src/index.js 2017-11-09 19:43:36 -05:00

Diceware

Current build/test status in Travis CI: Build Status

First, feel free to check out the live demo, running at https://www.dmuth.org/diceware/

Weak passwords are a big flaw in computer security due to a lack of "entropy" or randomness. For example, how many times have you used the name of a pet or relative or street in a password, or perhaps the number "1". Not very random, is it? :-) Worse still, if passwords are reused between services, that increases your security risk.

Fact is, humans are terrible at remembering random combiations of letters and numbers, but we are great at remembering phrases of words. That's where Diceware comes in.

Diceware is based on the proposal at http://world.std.com/~reinhold/diceware.html wherein virtual dice are roled 5 times, and the 5 digit number used against a lookup table of words. 4 dice rolls gives you 4 random words which are easy for a human being to remember, yet have a high amount of entropy which makes them hard to crack.

For more information on Diceware:

Can I run this on my own computer without using your website?

Yes. Feel free to clone this repo with git clone https://github.com/dmuth/diceware.git and run it from a local directory on your computer.

You can also set up a webserver on Mac/Linux boxes by running python -m SimpleHTTPServer 8000. You will then able to access DiceWare at http://localhost:8000/.

Will this work on an iPhone?

Yep! It should work on any mobile phone or tablet that supports Javascript, but I have only tested it on an iPhone 5S at this time.

Will this work in an air-gapped environment?

Yes, copies of assets such as Bootstrap and jQuery have been made, and Diceware can now be run without requiring an Internet connection.

Development

This app is built with Webpack.

When done editing main.js, the packed file can be built by simply running webpack on the command line. It will be writing to dist/bundle.js. To run webpack in a mode so that it regularly checks for changed files, run webpack --watch.

In a move that departs from Best Practices, I have made the decision to include the packed file in Git. My reason for this is that the software will be ready to run as soon as it is checked out (or a ZIP is downloaded), and that is a key design feature of this app--I want it to be as easy to get up and running as possible.

A local webserver can be set up by running npm install http-server -g to install it, then http-server to listen on http://localhost:8080/

In summary:

  • npm install - Install NPM packages used by Diceware
  • webpack --watch - Pack Javscript files
  • http-server
  • ./go-sync-to-s3.sh - Do this if you're me, to upload to S3. If you're not me, you'll need to do something else, or possibly nothing at all.

Who built this? / Contact

My name is Douglas Muth, and I am a software engineer in Philadelphia, PA.

There are several ways to get in touch with me:

Feel free to reach out to me if you have any comments, suggestions, or bug reports.