Filewatcher File Search File Search
Content Search
» » » » »


per-site password generator for Mozilla browsers

PwdHash is a browser extension (compatible with Iceweasel, Firefox, and Seamonkey) to transparently convert a user's password into a site-specific password which is not tied to the machine on which it was generated.

Hashing is triggered by prefixing the password with '@@' or by using the shortcut key 'F2'. The password field in focus is replaced by the hash value. Should the site be compromised, the attacker can now only see the hash of the password, not the password itself.

PwdHash does not encrypt passwords, but it makes brute-force attacks much less effective. It also means phishing sites can only steal a hash that's specific to the spoof page and useless on the site being imitated.

Package version:1.7-13


pwdhash for Debian

More information about this extension can be found in this academic paper:

and this presentation:

Should you need to access a site using a non-pwdhash-enabled browser, visit
this site to generate the necessary password hash using client-side Javascript:



pwdhash (1.7-13) unstable; urgency=low

  * Bump Standards-Version to 3.9.3 (no changes required).
  * Update machine-readable copyright Format to 1.0.
  * Bump maxVersion to * to support all Iceweasel/Firefox versions.

 -- Benjamin Drung <>  Wed, 28 Mar 2012 13:50:41 +0200

pwdhash (1.7-12) unstable; urgency=low

  * Bump maxVersion to 10.* to support Iceweasel/Firefox 10. (Clos


Upstream-Name: PwdHash
Upstream-Contact: Collin Jackson <>

Files: *
Copyright: 2005-2008, Stanford University
License: BSD

Files: chrome/content/md5.js
Copyright: 1999-2002, Paul Johnston
License: BSD

Files: debian/*
Copyright: 2009, Francois Marier <franc

Browse inside xul-ext-pwdhash_1.7-13_all.deb

         [DIR]DEBIAN/ (2)  65535+ mirrors
         [DIR]usr/ (1)  65535+ mirrors

Download xul-ext-pwdhash_1.7-13_all.deb

Results 1 - 1 of 1
Help - FTP Sites List - Software Dir.
Search over 15 billion files
© 1997-2017