Edit/clarification: I mean password generation as in *"deterministically generate passwords for your own use (e.g. to sign up for web services), based on some secret and on some site-specific data"*

I take the MD5 digest of the concatenation of my master password and a (non-secret) site-specific string. Then I take the first 16 digits of the hex representation.

The advantages of such a simplistic scheme are:

* Usable anywhere where MD5 is available
* Don't have to trust a firefox extension or whatever to generate the password for you

Does this have any hidden vulnerabilities? Obviously, if the master is compromised, I'm out of luck.

(Side note: Of course using hex digits is suboptimal entropy per character, but who cares if the password is longer to make up for it?)

```
#!/bin/bash

master=myMasterPassword
echo "$master$1" | md5sum | head -c16

```