azophy/cosmopass

Multi-language Random Passphrase Generator

CosmoPass

A multi language passphrase generator

Wordlists

Taken from various sources. Each wordlist is owned by each respective author.

1. EFF English Wordlist (by Electronic Frontier Foundation, https://www.eff.org/deeplinks/2016/07/new-wordlists-random-passphrases)
2. Indonesian Wordlist (by me, https://github.com/azophy/id-wordlist, CC-BY-4.0 license))
3. Catalan Wordlist (by Marcel Hernandez, https://github.com/1ma/diceware-cat, CC-BY-4.0 license)
4. Chinese (Pinyin) Wordlist (by Chenfeng Bao, https://github.com/cfbao/chinese-diceware, CC-BY-4.0 license)
5. Estonian (by Kaarel Pärtel, https://täringvara.ee/ , CC-BY-SA-4.0 license)
6. Hungarian (Soma Lucz, https://github.com/luczsoma/HungarianDiceware, CC-BY-SA-4.0 license)
7. Bulgarian (yradunchev, http://blog.radunchev.com/2016/06/02/randomized-diceware-word-lists-misc/, CC-BY-4.0 license)
8. Czech (by Vladimír Sedmík, http://world.std.com/~reinhold/diceware_wordlist_cz.txt, GNU GPL)
9. Danish (by Povl Falk-Jensen, http://pastebin.com/rFatW8up)
10. German (by Benjamin Tenne & Simon Klima, https://theworld.com/~reinhold/diceware_german_msfw.txt, GNU GPL)

Copyright and License

Copyright 2020 Abdurrahman Shofy Adianto

The website is released under GNU Affero General Public License v3

The wordlist used here is distributed under each original author as listed above

cosmopass's Issues

save selection to local storage

Remove external dependencies

As mentioned on a reddit thread :

You seem to be loading 3rd party scripts (there are 7 domains involved in the main page).
For something as sensitive as a password generator, you might want to host everything yourself.

It would be better if we could altogether remove all third-party dependencies from our page

Translate landing page to other languages

Currently the landing page is still in English. I planned to made it available in all the language listed as wordlist sources. For that in the future I would like to look for Static Site Generator that provide good internationalization support.

auto select language

either:

• record user's last selection in local storage, so the next time user open the site it would defaulted to last selection
• detect browser's language. reference: https://stackoverflow.com/a/8199791

Add more references regarding security

2 main topic to cover:

• recommended passphrase length
• regarding creating passphrase from 1 languase vs multiple language

mono-lang vs multi-lang

• https://blog.1password.com/1password-hashcat-strong-master-passwords/
• https://security.stackexchange.com/questions/113518/is-it-a-good-idea-to-combine-words-from-different-languages-to-increase-a-passwo
• https://security.stackexchange.com/questions/116238/would-a-multilingual-diceware-password-be-more-secure-than-a-monolingual-one

query parameter to select languages

Add more languages

Currently I plan to add all wordlists listed in [https://theworld.com/~reinhold/diceware.html#Diceware in Other Languages|outline](https://theworld.com/~reinhold/diceware.html#Diceware in Other Languages|outline) . Out of the 28 languages , I only had finished 5 languages + Indonesian