Determino downloads section
⬇ Determino 1.2.0: DMG (sandbox) | DMG
why?
Despite the well-known drawbacks of deterministic password generators, Determino can be useful in several specific scenarios.
For instance, imagine that for some reason, you do not want to add a record of using a certain service to your regular password manager. Or perhaps you don't have access to your password manager at the moment, but you need to create a password for a certain account. Determino is well-suited for secure usage in public places or on guest computers (although it is always best to ensure that there is no keylogger on the system).
Additionally, Determino is especially well suited for use with machines without Internet or local area network, as well as with completely isolated machines.
This application will be particularly useful for those who do not want to leave explicit traces of usage (besides the fact of running the application itself). There is no way to determine how many passwords have been generated, for which services, and their complexity.
quickstart
generate passwords
details
How does it work?
The concept of deterministic password generators traces back to the 1980s, where it was associated with computer games that utilized a pseudo-random number generator initialized with a specific identifier to create the user environment.
This application is a fully stateless password generator, which means that for any given input parameters (master password, optional private key, service name, password length, and pwned counter), it will consistently generate the exact same set of passwords. It operates solely on mathematical algorithms and does not rely on any internal or external storage.
Determino employs a complex polymorphic sequence of hashing functions, utilizing all the user-defined options to cascade and initialize a security-adapted version of the Mersenne Twister. Except for brute force attacks, Determino is sufficiently secure to be used with simple master passwords and non-random keys.
Furthermore, Determino is designed for offline use. The application does not establish connections to any internet servers, not even for checking updates (so if you installed the app from a source other than the App Store, be sure to manually check for the latest version periodically). Additionally, you have the option to block any network connections for the application through your firewall.
Options & Hints
Create archive options
⓪ Master password
The master password, in combination with the service name, is utilized to generate the resulting passwords. It is crucial to choose it carefully, following NIST recommendations, and avoid storing it in plain text. Ideally, commit it to memory.
Ensure that your master password is at least 16 characters long and includes a mix of upper and lower case letters, numbers, and special characters. For added security, use random Unicode characters, including emojis.
Caution! Please be aware that if you forget or lose your master password, there will be no means to recover the password sets that have already been generated.
① Private key [optional]
⌘O
For enhanced security, you have the option to utilize a private key in addition to the master password. This private key can be sourced from a file of any type and size; however, it is highly recommended to use files containing true random data.
For particularly critical passwords, it is advisable to keep this file encrypted or, at the very least, accessible exclusively to the owner.
Caution! Please be careful when handling your private key file. If you accidentally delete or modify it, there will be no way to recover the password sets that have already been generated.
② Service name
The service name in Determino functions similarly to entries in traditional password managers.
It can be as straightforward as "apple.com" or more intricate, such as "🔐📷Vacation". If you choose to rely solely on your memory, it is crucial to establish a systematic naming convention and adhere to it consistently. This will help you manage and recall the service names effectively when generating passwords.
③ Length
⌘+ | ⌘-
The length of resulting passwords in Determino is theoretically unlimited, although by default, it generates passwords with a length of 18 symbols. It is essential to keep in mind that passwords of varying lengths are entirely distinct from each other. Therefore, changing the length parameter will yield completely different passwords for each value.
④ Pwned counter
⌃⌘+ | ⌃⌘-
If the password has been compromised, it is necessary to generate a new one. It is possible to do so using the same master password and service name, you just need to increment the pwned counter to yield completely different passwords.
⑪ Generate
⌘G
Initiates the password generation process based on the specified options.
⑤ Type A
⌘1
Uses all 95 ASCII printable characters. Determino checks that at least one digit, one character, one special character, uppercase and lowercase letters are present in password. This type is recommended for use in all cases.
Entropy (18): 118.2574 bits.
⑥ Type B
⌘2
Determino uses 70 ASCII printable characters with this type and checks that at least one digit, one character, uppercase and lowercase letters are present in password. Recommended for use with services that do not allow special characters in passwords.
Entropy (18): 110.3271 bits.
⑦ Type C
⌘3
Most compatible password type, uses 62 ASCII printable characters, includes at least one number, uppercase and lowercase letters. Can be used with services that implement legacy password policies.
Entropy (18): 107.1755 bits.
⑧ Type D
⌘4
This type contains only digits and can be used to generate PIN numbers.
Entropy (18): 59.7947 bits.
⑨ BIP39 12
⌘5
BIP39 compatible mnemonic phrase of 12 words.
Entropy (12w): 128 bits.
⑩ BIP39 24
⌘6
BIP39 compatible mnemonic phrase of 24 words.
Entropy (24w): 256 bits.