BURP

Beautiful Unique Reliable Passwords

BURP is a reliable password generator. You feed BURP a key and your unique passphrase and it will belch back a password that can be reliably regenerated again later so you never have to remember it.

BURP is meant to replace the passwords you use for trivial internet accounts. Instead of constantly forgetting your password to the point of writing it down, using a simple and insecure password, or worse the same insecure password for multiple sites. Instead you create a password with BURP that you can regenerate later, the idea is that you don't have to remember your password and there's nothing to lose.

--

Key - A unique identifier, the reason for generating the password.

Passphrase - Your BURP's secret sauce. This should be a long but memorable sequence of words, numbers and punctuation- the longer the better. Pick something that's both memorable and easy to type accurately and don't use well known phrases, famous quotes, or literature.

Usage

$ ./BURP.rb --help

Tasks:  
    BURP.rb generate     # Generates a new password (Default task)  
    BURP.rb help [TASK]  # Describe available tasks or one specific task  

$ ./BURP.rb --help generate

Usage:  
    BURP.rb generate  

    Options:  
        -W, [--wordlist=WORDLIST]      
        -w, [--words=N]              # Default: 4  
        -s, [--seperator=SEPERATOR]  # Default: -  
        [--alphanumeric]         

Generates a new password (Default task)

Generate a new password. This is the default task so we don't need to specify it.

$ ./BURP.rb

Enter your unique key: reddit.com  
Enter your passphrase: (not echoed to terminal)    
Your password is: tower-wigwam-baby-salad  

Generate a password using a custom wordlist. The list provided is for example only and contains the same words as DEFAULT_WORDLIST.

$ ./BURP.rb -W wordlist.txt

Enter your unique key: reddit.com  
Enter your passphrase: (not echoed to terminal)    
Your password is: sky-flower-boss-link

Encrypt your custom word list

$ ./BURP.rb encrypt wordlist.txt

Enter your passphrase: (not echoed to terminal)

Generage a password with your encrypted word list

$ ./BURP.rb --wordlist=wordlist.txt.aes

Enter your unique key: reddit.com
Enter your passphrase: (not echoed to terminal)
Your password is: vest-season-star-feline

Generate an alphanumeric password.

$ ./BURP.rb --alphanumeric

Enter your unique key: reddit.com     
Enter your passphrase: (not echoed to terminal)  
Your password is: morgue-fur-cell-rosin-1931  

Disclaimer

BURP is not inherently secure and comes with no warranty, I definitely would not recommend you use it to generate your bank password.

To Do

• Password restrictions (alphanumeric, uppercase, special characters, maxlength, etc)

Security

The default word list is 256 words resulting in just over 4 billion (256^4) possible permutations with the default settings (4 words). For added security roll your own custom word list with at least 256 words.

You can now encrypt your word list!

Notes

Much of the inspiration for BURP comes from the XKCD password comic and humanhash. My friends Tim Burden and Todd Graham helped me come up with the name and brainstorm ways to make BURP more secure, such as possibly encrypting the word list.

The default word list was generated using this Paivio word list generator.

Thanks again to Todd for showing me a possible implementation for encrypted wordlists.