FAQ

1. What is Ultra Password Creator?

Ultra Password Creator is a solution to the most widespread and difficult problem in password use - the inability to use strong passwords because of limitations to memory. UPC creates a bridge between information a person easily remembers and the highly complex passwords they need to use. With UPC one can use passwords from memory far stronger than they ever thought possible.

For instance, how many of us could remember a 32 character pseudo-randmom password "oNWKKj6aNljXYAjzhpj8BaRaGteu10c+"? This is beyond most people's ability, however most everyone can remember a phrase such as, "To be or not to be, that is the question" that UPC used to produce that complex password. While this is a simplified example, UPC functions by transforming a secret phrase a person knows into complex character strings that serve as passwords. Further, with UPC one can produce an unlimited number of strong passwords from memory, like the 32 character password shown above from the same secret phrase.

In short, the limitations of human memory no longer needs to be an obstacle to using very strong passwords for all your accounts.

2. Who Can Benefit By Using UPC?

UPC is a flexible password making tool designed to make phenomenally strong passwords from the type of information humans are good at remembering or have access to. In general, those that fit the following profile can benefit from UPC.

Anyone that;

3. System Requirements?

UPC is presently available for Microsoft Windows 7/8/8.1/10 32 & 64 bit. Requires approximately 41.3 MB of storage.

4. How Does UPC Differ From Password Managers?

UPC is designed to produce exceptionally strong passwords from memory or from information an individual has. UPC doesn't store passwords, rather, passwords are reproduced on-demand. Producing passwords on-demand eliminates the need for a master password and the possibility of single-point-of-failure that can occur with stored passwords.

Password managers generally produce, store and can transmit passwords to websites that support certain APIs. In this respect they perform a wider range of functions than UPC. However, password managers themselves need a master password to manage the encrypted passwords they store. If lost, the user may not be able to recover their managed passwords and if stolen an adversary may gain access to all one's accounts. UPC can be a useful way to manage the password manager's master password and leave no stored copy to lose or attack.

5. How Does UPC Differ From Traditional Password Generators?

Traditional password generators usually produce non-deterministic pseudo random passwords. To be effective the passwords must be long & complex which almost gurantees the user will not remember them. This forces the user to store the passwords in digital or physical form and those copies introduce the risk of loss or theft.

UPC passwords are produced on-demand when they are needed instead of being stored. The UPC algorithm assures the same password will be reproduced every time the same inputs are provided. Further, the algorithm permits one to use information they can easily remember giving the user the ability to use highly complex passwords from memory.

6. How Much Does UPC Cost?

Ultra Password Creator is offered free of charge to everyone. The application is fully functional and grants the licensee perpetual use for individual and commercial purposes.

7. How Does UPC Function?

At the heart of the UPC engine is the industry standard Sha512 hash function. This hash algorithm has excellent pre-image charactertics important to this use case and it benefits from the avalanche property. Together, the two-part key and nested structure is intended to provide sufficient distinctness while optimizing the entropy of the SIP and PI inputs. The approach is described in simplified form below.

[ HashFunction [ HashFunction [SIP] + HashFunction [PI] ] ]

Alternative "slow" hash functions, such as Bcrypt and PBKDF2 often used for storing passwords were not chosen because UPC generates passwords dynamically (and does not store them) and because the SHA512 algorithm is more widely supported on the client devices UPC is intended to run.