PassCheck vs Webful PasswordMaker

PassCheck is a free app that allows you to check how strong and secure your existing passwords are, by calculating how much time it would take an average computer to crack it. It also checks if your passwords have been compromised i.e found in a data breach. If you discover you're using an insecure password, the app allows you to generate a strong and secure password! How data breach discovery works: 1. When you input your password, PassCheck calculates its SHA-1 hash. 2. It passes the first 5 digits of the hash to the PwnedPasswords API, which returns a list of hash suffixes with the same first 5 digits (i.e prefix), and the breach count. 3. Passcheck combines each of the suffixes with the prefix and checks if the final hash is identical to the password's hash, warns you if it is. This way, your entire password (i.e its hash) is never sent, only a small portion of it, which helps keep your password anonymous.

Webful PasswordMaker is a modern app providing an interface for the PasswordMaker protocols supported by various browser extensions on desktop and some older mobile apps. The app can create per-site passwords deterministically, securely and offline. And it now supports multiple profiles to help fulfil web sites' varying password requirements. Its source is available on GitHub, and all cryptographic functions use trusted 3rd-party libraries to reduce the chance of introducing vulnerabilities. The conventions followed for the hash protocols are detailed at https://passwordmaker.org/