Method for protecting website password of user

Abstract

The invention discloses a method for protecting the website password of a user. The method comprises the following steps that on the page where the user inputs the password, a website introduces a Javascript script file through the <script>label of the HTML language; in a <From> element including a password input box in the page, the names of a user name input box and a password input box in the Form and a user-defined ID of the website are designated through a hidden <INPUT> element; the user inputs the password, after the user clicks on Submit, form data is submitted in front of a web server, and the page calls a function; the user name, the password and the website ID are converted into a complex password through the function via a one-way algorithm, and the input password is replaced; the data is submitted to the web server. According to the method, under the condition that user experience is completely not influenced, a high-strength password protection scheme is achieved, user account leakage and library colliding risks are effectively avoided, and user account and asset safety is protected.

Description

technical field [0001] The invention relates to the field of website password protection, in particular to a method for protecting user website passwords. Background technique [0002] In recent years, large-scale user account leaks caused by websites being dragged have intensified. For example, in the recent leak of 60 million Dropbox accounts and 500 million Yahoo accounts, website users can do nothing about it and can only hope that the website will take good security precautions to avoid leaks. However, no website is 100% secure, and any website is at risk of account compromise. Once the account is leaked, because most users are used to using the same account / password on different websites, the user’s account on all websites will face being hacked. Log in. If the user’s accounts on the two websites A and B are the same, the hacker can successfully log on to the B website, which is called successful credentialing) risk, and there have been many cases of actual economic ...

AI Technical Summary

Problems solved by technology

Password management software has many obvious disadvantages: 1. Passwords are randomly generated, which is difficult for users to remember, especially in the case of a large number of website accounts, once the software is unavailable (such as not at hand or data damage), users will not be able to Log in to the website; 2. It is inconvenient to use. When logging in, the user needs to open the password management software to query the password