Verified Password Generation from Password Composition Policies

Password managers (PMs) are important tools that enable the use of stronger passwords, freeing users from cognitive burden remembering them. Despite this, there still many who do not fully trust PMs. In this paper, we focus on a feature most PMs offer might impact user’s trust, which is process generating random password. We present three commonly used algorithms and propose solution for formally verified reference implementation password generation algorithm. EasyCrypt to specify verify our implementation. addition, proof-of-concept prototype extends Bitwarden only generate compliant solving frequent users’ frustration with This demonstrates component can be integrated into an existing (and widely used) PM.