Passwordsheet helps you use a password only on a single site. It gives you a list of strong passwords which you can print on paper making them available far more easily. The portability and speed of access of paper beats smart phone applications, native applications on your mobile phone or desktop and makes the process practical.
The downside is that the paper requires physical security. You need to keep it in your wallet or purse and guard it like diamonds. In practice though, the most practial solution for most people has been the use of a well known, memorable, small set of passwords that were reused often and probably known by ex-partners, colleages, the operators of several websites, contained in your email and which are there for the plundering on the many sites that store your passwords in plain text or receive them without using an encrypted https link.
The passwords are created within the browser after the web page loads by JavaScrypt code. You can read that code with the view source option of your browser. The passwords are not sent to our server. We never see them. Your browser may cache widget values for use with the back button as part of its browsing history but there is also code which will replace the numbers when the page is reloaded. If you generate the sheet from a shared public machine you may want to reload the page after printing or to press the refresh button at the bottom of the page. The random numbers are generated by the seed used by the browser's random number function. It is not practical for somebody to calculate the sequence of passwords or to know which password in a sequence follows another password. As a result the creation of the passwords is practically independent.
The number of different values that each character of the password may have is signficant for security as is the length of the password. It would be even better if the password were longer but it needs to be typed so we have used eight characters as this is accepted by most systems. Upper case, lower case and numeric characters are used giving a good range though this has been curtailed by not using certain characters which are frequently confused with some fonts. This is done as a convenience by avoiding mistyped and potentially frozen passwords. The ommitted characters are: O/o/0,B/8,L/I,l/1 and S/5. There is a limit to how much of this should be done though as it reduces the range of characters from which the intruder has to guess.
