yashsingh1/xdaforums huggingface dataset:
[Android Apps and Games] Magissia:
Excuse me, the password shown on the presentation screen shot is not secure, hard for humans to remember and easy for computer to crack down.

You need more characters, less special characters, some real words in a mix with numbers and special chars to make it longer, harder for computer to crack down and easier for humans to remember.

Password strength checker only flag your example as "Medium" (3 hours to pwn)

A good password would require thousand year to crack down on current hardware, and being easy to remember for a human.

For example, Beating4DeadHorseWithACarr*t is easier to remember for human and harder for computers de crack down (about 550853776651350140 years)

Another shorter secure password for website with low security (16 max chars) -> 3atingPizz4With$ (1500 years) and you can replace the last char ($) depending on the website, F for Facebook, T for Twitter etc.

You should use space in the password where allowed

Increasing your password strength is more about length than it is complexity. Multi-word phrases are more secure passwords than 8-10 character nonsense words.

You can use http://www.random.org/strings/ on any browser and add a special char at the end or the start of the result.
[Android Apps and Games] gustavomondron:
Hello, that password is just an example to help the user understand how the app works. Of course, the application allows you to generate passwords much much longer including numbers, uppercase and lowercase chars and special chars.
[Android Apps and Games] Magissia:
Hello, allowing is one thing, but i doubt it will forbid non secure password and explain why it's insecure (else you couldn't generate the example, if you're not using another version than the one you distribute here, if it's the case it would bring suspicions)

As there's no point to generate a password if it's not a secure one ...

Best regards.
[Android Apps and Games] Brshk1:
Well, in the description of Password Hasher Plus one can read:

"This extension is a port of the Firefox extension at http://wijjo.com/passhash"

I'm going to try Twik. It seems a very good idea to improve security. Thanks!
[Android Apps and Games] gustavomondron:
I'm sorry but that Firefox extension is not updated since 2012 and it does not support using a private key (in addition to the master key) as the Chrome extension and Twik do. As a consequence, it's far less secure and it's not compatible with Twik (it doesn't generate the same passwords). That's why I've just started to develop Twik for Firefox :).
[Android Apps and Games] KalenDRON3000:
Good! It's useful to one-double-entry sites for me. Thanks :)
[Android Apps and Games] kabracity:
I've been using this system since I learnt about the firefox extension, and it's pretty convenient for some scenarios. I'm giving Twik a try as I have been using some other similar applications in the past (aesthetics look much cooler in this one I must admit). Thanks to the OP for the app (and a +1 for no ads + open source)

Not sure if you got the mechanics right, but you can set a password length on the settings; once you configure the length, all your passwords will be the same length (you can of course do exceptions and have each site with customized settings). So in the end, it's up to you to choose the complexity of the resulting password (and from the user side it's transparent, you can have a master key with length 8 and ending up in a 20 length password. What we see in the picture is, as the OP mentioned, just an example screenshot.

Regarding the complexity warning, it's not like you choose your own password (e.g: dictionary based passwords make no sense here). You might set a length of 4 of course and that would be considered a weak password... but in my opinion if you're reading XDA you can realize that :)
[Android Apps and Games] Magissia:
Please, 8 character password is weak, even with special characters. http://m.intel.com/us/en/topics-overview/passwordwin.html

I've got the mechanic right, i'm basically saying the example is a bad example, and the app should nag you if you use BS password of 8 characters, be it for masterkey or website.

Thank you.
[Android Apps and Games] gustavomondron:
Hello! We're looking for people to help us translating Twik to some additional languages. Twik already supports English and Spanish, but we'd like to support much more languages. If you want to collaborate, that would be awesome!

Thank you very much!
[Android Apps and Games] SystemErrorOne:
Gonna try this out hopefully it works well. Very excited for this app :good: Great job.
[Android Apps and Games] kabracity:
Hi,

I can help with French translation if needed (I'm not French though, in case some French guy wants to take the job instead)
[Android Apps and Games] kabracity:
Hi,

I've pushed the files for French translation to github.

Cheers
[Android Apps and Games] gustavomondron:
I'm glad to answer your questions! (very interesting questions, by the way) :)

The point is that the passwords are not generated randomly. They are generated using an algorithm based on HMAC SHA1 (it's implemented in the PasswordHasher.java file), using as inputs the following:

A "tag" of the website, typically the domain (for instance, "facebook", "google", "ebay", etc.)

The private key, stored in your device.

Your master key, that only you know, and is not stored anywhere.

This is a mathematical process and, therefore, the same password is generated each time for the same website. This process is not reversible, so it's impossible to guess your private key or your master key in the case that the password of a website in particular is compromised.

I would not be very worried about that :) On the one hand, I use and need the app everyday so I'm the first one interested in keeping it working flawlessly :) On the other hand, it's not only free but open source so everybody is free to fork it, improve it, port it to different platforms, etc. in the case that I can't do it.

You're right, I don't personally own the available Chrome extension (Password Hasher Plus). However, I also started to develop Twik for Google Chrome and I'll release it in a few days. It will support multiple profiles and will synchronize the options among your different Chrome installations.

Given that we'll have our own Twik for Chrome extension, synchronizing the desktop and the Android app is a feature that can be introduced in the future. However, this kind of synchronization requires of a web server working 24 hours a day, and this is not a minor issue (for instance, deploying it on the cloud of Google is not free if you exceed a quota).

In addition to the Chrome extension, I'd also like to develop (but I can't tell you when or whether it will actually happen) a desktop application, implemented as a Chrome application, which can be executed out of the browser just as any native application.

I understand your concern, but you won't have to pay if you use Twik, it's free and opensource (GPLv3), you can build it yourself if you want :) I didn't trust the cloud for my passwords, and that's why after looking for alternatives I found the mechanism used in Twik the most appropriate for my needs. I think it's worth trying it, especially taking into account that it's not a closed-source and paid service.
[Android Apps and Games] gustavomondron:
Hello! We've just released the Twik for Chrome extension for your desktop browser. You can get it now on the Chrome Web Store. Of course, it's also open source (the source code is available at GitHub).

It is 100% compatible with Twik for Android and it also supports multiple profiles. One of my favorite features is that all your profiles and passwords settings are synchronized among your Chrome installations, so you just have to setup Twik only once :)

More information is available on the Twik website, and I'll be happy to answer all your questions here.

Looking forward to your feedback!
[Android Apps and Games] murderered:
+1 good work, +1 open source

I have not analyzed it and i think a normal user also would not do it, so here is a question:

For what do you need a network connection?

Please write your answer not only here but also in the description in the stores (at least f-droid :D), many people like me are paranoid....

EDIT: translated it to german, see result at https://github.com/gustavomondron/twik/issues/2
[Android Apps and Games] gustavomondron:
That's a good question :)

As you know, Twik is a password manager in addition to a password generator. We really wanted to provide an UI that allows you to get the password you want as fast as possible. Showing not only the name of the website but also its favicon make its easier to find it faster and also makes the UI more visual. In order to download the favicon, the Internet permission is necessary :) That's the only point in the application that uses the Internet connection. It's in the FaviconLoader.java file, if you want to take a look.

I'm updating the Play Store description to justify the need for this permission, you got a point there.

Thank you very much for your comments and, of course, for the translation to German too, we'll add it to the next release :) You can be sure that your name will be included in the acknowledgments :)

P.D. I almost forgot! I know it's a bit long but... would it be possible to get the Twik description in Play Store also translated to German? It's not urgent, anyway :)
[Android Apps and Games] murderered:
Thanks.

It's not translated directly. But i think it's better to read.

Please release the text together with the new version, not before (else you may get bad votes at the Play Store).

I don't know how the f-droid store works, but if possible, please add also there the german description.
[Android Apps and Games] gustavomondron:
Thank you very much, it was very fast!

With regard to F-Droid, I don't know how it works too. I didn't publish the app there myself and I don't know who is responsible for keeping it updated. I guess it'll be possible to open an update request but, honestly, I don't know. I'll take a look at that.
[Android Apps and Games] sevenpastzeero:
[MENTION=5308750]gustavomondron[/MENTION] thank you very much for the app. I tried to use password managers many times before but could not get used to them, but twik makes everything different :)

I just wanted to ask you how to get the favicon to show? Is there any special way? For example, I tried to type the website as google, google.com, www.google.com but every time there was no favicon only the first letter.
[Android Apps and Games] gustavomondron:
Hello, I'm really glad you find Twik useful! :good:

Regarding the favicon, to get the favicon you just have to share the webpage you're generating the password for with Twik from your favourite browser.
[Android Apps and Games] sevenpastzeero:
Thank you. I never thought if doing that. Now I have favicons showing :)
[Android Apps and Games] sloheim:
So, at first glance, I love, Love, LOVE the idea of this app. I'm a LastPass user, and would consider jumping ship to this. I have almost 200 passwords set in my LastPass account, and it would be pure hell to change them all to follow your algorithm... but it would be worth the effort.

BUT.

What happens when I get that dreaded email from Facebook telling me that my account has been compromised? There is no way for me to change JUST my facebook password. I'd need to change my master password, which would force me to change ALL of my passwords, because the hash would change.

Do I understand that correctly? If so... thats a dealbreaker.
[Android Apps and Games] khaytsus:
See this post from the OP before. No, you would just change the tag.

I like the idea of this app, I've seen the idea before of taking "some string" (be it URL, a tag, whatever) + master password = password to use. But I also have general purpose passwords, like lock combinations and stuff like that. They don't really fit with this app. I suppose I could use my existing solution (Keepass) for certain types of "passwords" and this for website passwords. I might try it out and see how I like it. One thing I like about this is that there's NO syncing required, ie: with KeePass if I add/modify on my desktop I have to hope that Dropbox has synced the file up to Dropbox and my device has synced it Down, or from the device, etc etc... And yeah, I have to hope the file itself is secure since it's on Dropbox.

Thanks, nice idea, hope to see a Firefox extension soon :)
[Android Apps and Games] sloheim:
Thanks for pointing that out. It definitely warrants consideration now.

Only upside of LatsPass over this now is the IE extension... have to weigh the pros and cons of both...
[Android Apps and Games] sloheim:
As much as I like it, I just see too many barriers caused by "forced" password changes.

Today I had a website change their security policy, and they asked me to change my password. Lets say the original password was generated with a tag of "ESPN". Theoretically, I could just make it "ESPN2"... but with 200 passwords to manage, I'll never keep track of which sites are 2, 3, 4, etc. It just seems like a maintenance nightmare.

Thanks for a great idea... I just think it has some shortcomings that folks will discover in the long run.
[Android Apps and Games] pcienniwa:
using phone and desktop Twik

I'm considering using Twik on both my Android phone and on desktop Chrome. The problem with Chrome is that I can't see the password that's generated, unlike on Android where I can see the password. My concern is that I want to be sure that both platforms are generating the same password. (I wouldn't be asking this question if I could actually see the Chrome password when generated!)

Please tell me if I understand Twik correctly for use across phone and desktop. If I 1) use same master key, 2) use same private key, and 3) use same website tag, the password generated at Chrome (the password I'm unable to see) will be the same password that I'm able to see with the Android app. Right? Or wrong?

Thanks.
[Android Apps and Games] gustavomondron:
Your're right, both apps are 100% compatible and therefore they generate the same passwords. Actually, I could add a button for seeing the generated password, but I'm not sure that's the typical use case. Maybe it's worth adding it as an optional features.
[Android Apps and Games] gustavomondron:
I understand your concern. Actually, Twik manages all your tags, both in Android and Chrome (and now also in Python, by the way :)), and if you change the tag of a website, Twik will remember it.

For instance, in the Android app, when you share a website with Twik from the browser, Twik associates the website domain with the tag you define, so the next time you share that website Twik will remember the tag you used before.

I've personally been using this password generation mechanism for a long time (more than a year for sure) and it's still the best choice for my own needs.

However, I know there's still room for improvement with regards to tag management and I've some ideas I want to implement in future releases.
[Android Apps and Games] pcienniwa:
I don't know why someone would

not

want to see a password, especially when one version of the app shows it and the other doesn't. Maybe I'm just a control freak. :confused:
[Android Apps and Games] gustavomondron:
Firefox extension is currently under development, I hope it's available soon :)
[Android Apps and Games] gustavomondron:
Actually, I think that the point is that you don't need to know the password of any website (just your master key), so you don't even need to see it :) In the case of Android, it's more likely you need to see it because typically you're going to type it or paste it in other place (maybe in other device). In my personal use case, I've only needed to see that plain password for debugging purposes, but I know that it doesn't have to be right for every user, of course. It'll be added as an optional feature, don't worry :)
[Android Apps and Games] murderered:
Small fix for your code.

Have created a very small fix for the profile view. See pull request #4 at github.

Just writing it here, because it doesn't seems so that you get notifications via github.

Also thanks for integrating the german translation already.

OT: Funny that xda-dev switches to mobile-version of page because i have currently only 1024*768 at my desktop :D
[Android Apps and Games] gustavomondron:
Thank you for your help! I'm aware of it, it's just that I'm really busy these days, but we'll release a new version ASAP with more features that are currently under development.
[Android Apps and Games] pcienniwa:
I'd like to make another case for visibility of Twik passwords on the desktop. In two instances today, a window opened where I was asked to provide a password, but the Twik icon didn't appear. My phone is not with me, so I'm unable to log on to those two accounts. I simply don't know the password. If I could

see

my password from chrome, I could copy/paste or enter them manually. For now, I have to wait till I have my phone.

For the record, window 1 was the desktop sign-in for google photos sync and the other was a bank sign-in through Mint.
[Android Apps and Games] gustavomondron:
Yes, sometimes you need to generate a password for a desktop application, or for a terminal tool, and using your phone for those cases is, at least, not very comfortable :)

However, using the Chrome extension for this purpose isn't ideal too, it's more like a workaround. I'll try to provide Twik as a desktop application too, which I think would be very helpful. In the meantime, when I need to generate passwords for desktop applications, I use Twik for Python.

I'll be releasing a new version of Twik for Chrome very soon, I've just finished fixing some bugs and now I'm adding the option to see the generated password.

By the way, thank you very much for your feedback, I really appreciate it :)
[Android Apps and Games] gustavomondron:
I have just released Twik for Chrome 0.4.4. Now you can see the generated passwords by clicking on a button. This version also includes some UI improvements, bug fixes and now it's also available in Italian.
[Android Apps and Games] sevenpastzeero:
Eagerly waiting for Firefox extension :) Thank you.
[Android Apps and Games] greizgh:
Firefox extension

Hi fellow Twik users!

I'm glad to see that you some of you are using firefox ;)

As I said to Gustavomondron, I'm currently working on a firefox addon. I don't have as much spare time as I would want, that's why it's going slowly.

So far it's able to generate password compatible with twik using firefox's internal HMAC_SHA1 algorithm. It still need some work on the interface to be fully usable.

I'll keep you updated but I hope to be able to release something next week.

Edit:

You can get it here: https: //addons.mozilla.org/en/firefox/addon/phashword/

Github: https: //github.com/greizgh/Phashword
[Android Apps and Games] sevenpastzeero:
Thanks greizgh for the firefox extension.

A small suggestion, can you make an option to disable it on certain sites, or a button to quick stop the extension.

Edit: I think if I press enter while the passfield is yellow, the password is used as it was typed and not the hashed one.
[Android Apps and Games] greizgh:
Hi zaids!

You can disable phashword by pressing "Escape" key while on password field. Support for more keys is a planned feature.

Concerning password sent "as is" (not hashed) I'll take a look at it.
[Android Apps and Games] sevenpastzeero:
I have been a Twik user since it was released, and it became a part of my daily use. I just wanted to know if there is a plan to make an ios port or if there is a similar app for ios?
[Android Apps and Games] orangepowerpokes:
password generation?

I have twik installed on 2 phones. Why is the generated password different on each, when the master key is the same? I get the same graphic on both phones, but the passphrases are not even close. Both using version 1.3.10

Edit: I got the pw to match by making the Profiles the same on both devices, and using the same profile key.

Edit: App is still working great on nougat. This app is great!! I assume the dev is not updating. Using it for a while now and really like/appreciate it. TU.
[Moto G Q&A, Help & Troubleshooting] bamx2:
I am giving one of my flashed phones that I was using on Page Plus Cellular (Boost Moto G XT1031) to a friend who wants to use it on Boost Mobile . The phone was flashed using using the procedure here- http://xdaforums.com/showthread.php?t=2681166. The phone has the unlocked bootloader and is running stock VZ 4.4.4. I know that I have to change the SPC back to original (I saved it ) Can I simply flash it back from VZW 4.4.4 to one of the available earlier stock Boost stock roms 4.4.2, 4.4.3 (don't want to brick it) ?. Any help in making this phone useable on Boost Mobile is appreciated -Thanks.
[Moto G Q&A, Help & Troubleshooting] CodyF86:
You should just be able to change the SPL back to what it was originally and flash the factory firmware and be good to go. Do the factory activation after you flash *228 or whatever it is.

There was a filesystem change between 4.3 and 4.4.2 but if you are just flash 4.4 you should be fine. Just make sure to follow the appropriate flashing guide.

http://xdaforums.com/showthread.php?t=2542219

If there were any other specific changes you had to make when changing to Page Plus in CDMA workshop you may have to revert those, but I don't think there really was.
[Moto G Q&A, Help & Troubleshooting] bamx2:
OK. - I will give it try when the Boost Mobile XT1031 Moto G 4.4.4 ROM ( 4.4.4 Blur_Version.175.44.1.falcon_cdma.Boost.en.US) image shows up at one of the hosting sites mentioned in this thread - http://xdaforums.com/showthread.php?t=2546251
[Moto G Q&A, Help & Troubleshooting] gpz1100:
4.4.4 makes changes to the trustedzone. You will not be able to downgrade. You'll need to wait until boost 4.4.4 firmware is released.
[Moto G Q&A, Help & Troubleshooting] bamx2:
Tthe stock Xt1031 Boost Moto G 4.4.4 rom is now available - http://xdaforums.com/showpost.php?p=55651962&postcount=408, A quick run through of the procedures for flashing and any other changes (via DFS) to make the phone so that is can become activated on Bost Mobile is appreciated. - Thanks
[Motorola Photon Q 4G LTE] iberia1:
Hi

I have bought Photon Q 4G LTE on ebay. the device is amazing i love it. as i am living in Georgia (Europe) we have only one CDMA operator here. i took the phone to the service office where the service guys set up the device to there system. but they have activate only calls and sms on the CDMA network the phone is making calls and sends text messages but they couldn't enable 3g internet (they simply didn't know how to do it on MOTOROLA Photon Q 4G ).

is there any way to enable the 3g internet on my phone?
[Motorola Photon Q 4G LTE] arrrghhh:
Did you check to make sure the frequencies your carrier is using is the same as Sprint?

If not, then it will not work properly...
[Motorola Photon Q 4G LTE] iberia1:
my friend has bought HTC EVO 3D Sprint 1GB from ebay and it works fine on the local CDMA network - it calls and has 3G internet as well.
[Motorola Photon Q 4G LTE] arrrghhh:
Not sure if those operate on the same frequencies or not.

I suppose make sure the APN's are configured correctly...? I have never tried to hack a CDMA device to work on another network. Not sure anyone else with a Photon Q has either - most who are hacking the device want to use it as a GSM device and they add a SIM slot for this purpose.
[Motorola Photon Q 4G LTE] iberia1:
first of all thank you very much for respond i appreciate it

the point is i cannot config APN, in MOBILE NETWORKS APN settings is invisible when the network mode is CDMA or CDMA/4G or AUTOMATIC. APN settings are visible only when network mode is GSM/UMTS (on this mode i can create new APN,s) but when the phone is at GSM/UMTS mode it losses signal and is not able to make calls.
[Motorola Photon Q 4G LTE] CornholioGSM:
so on what mode you are actually connected - check it in *#*#46363*#*? and on what rom - stock or cm/etc?...and what carrier?