![]() |
Password Manager V.1 - Printable Version +- Sinisterly (https://sinister.ly) +-- Forum: Coding (https://sinister.ly/Forum-Coding) +--- Forum: Python (https://sinister.ly/Forum-Python) +--- Thread: Password Manager V.1 (/Thread-Password-Manager-V-1) |
Password Manager V.1 - Ex094 - 05-22-2013 ![]() May I present you my new database program, the Password Manager Version. It's an improved version from my previous VRD project. For me the VRD has very buggy code, Here are some of it's aditional features: Features: - Base64 encoded credentials - Unix Based Authentication (Login to be precise) - Less If statements - Intro to Classes - Better Error Handling - Better Code (From VRD Point of View) - Command Input (No menu) - Linux Compatible Only (Sorry Windows Users, Read below for Why Windows is not supported) - Python Version 3.3 Used Glitch: - The delete function with display "Credentials Deleted!" even if the username doesn't even exist. I'll be releasing a fix soon as it's not a big problem - Clear function will not work for MAC Users Commands Usage: insert -- Insert credentials into the database view -- View the credential database delete -- Delete a credential based on username search -- Search for a credential detail using Username exit -- Quit program Logging In: In my password manager I've used PAM to simulate Unix Authentication which means that Linux users can log in using their account username and password. Because Windows doesn't use Unix auth, logging will give error and hence program will easily malfunction. I will include support If I find any windows related auth module for Python. Here's a screenshot of the Unix Auth: ![]() The password that user will input will not be visible as I've used getpass() module as a part of security Security: Without using a encoding to enccode the credentials that a user enters, whats the point of making a password manager? It's always supposed to make the credentials for your eyes only. Well the most basic encoding there I could find was base64 so everything you enter gets encoded in base64 and then It gets stored in the database. When you fetch the results from the database, it gets decoded on it's way to the output. Well if you have a better encryption then you are welcome to suggest ![]() I believe that I got confused between Encryption and Encoding, hence speaking of base64 it's not secure at all as deque said hence I'll be implementing another one in the upcoming version! Please be sure to install Simple PAM module in your python module repo before using my program, you can get Simple PAM from: Code: https://github.com/leonnnn/python3-simplepam Source Code: Code: import os, platform, base64, sqlite3, random, getpass Compiled Download: You can download the compiled source from here: Code: http://ex094.uhosti.com/py/ Encountered a bug? Report it in you comment!
Have Fun ![]() Regards, Ex094 RE: Password Manager V.1 - RogueCoder - 05-22-2013 Nice one work man ![]() Personally I store my most complex credentials in TrueCrypt with a 20 pass and a key file on a hidden usb stick ![]() ![]() RE: Password Manager V.1 - Deque - 05-22-2013 Hey Ex094. That's a nice project, I like the user interface, but Base64? That is not an encryption, it is an encoding, meaning you can just get the passwords and decode them without a hassle. The passwords are not secured at all. If you want others to use it, you should take care to manage the passwords in a secure way. Ask for a masterpassword, use that to encrypt and decrypt the credentials in the database. Don't save the masterpassword (ever). Deque RE: Password Manager V.1 - Anima Templi - 05-22-2013 Nice tool! It's good to see something new from ya. As @Deque stated you should review your "encryption" and take what Deque wrote serious. RE: Password Manager V.1 - Linuxephus™ - 05-22-2013 (05-22-2013, 08:29 PM)Anima Templi Wrote: Nice tool! It's good to see something new from ya. As @Deque stated you should review your "encryption" and take what Deque wrote serious. Followed by what surely @"ArkPhaze" himself must just be dying to state himself as well!:lol::lub: RE: Password Manager V.1 - Linuxephus™ - 05-22-2013 (05-22-2013, 08:29 PM)Anima Templi Wrote: Nice tool! It's good to see something new from ya. As @Deque stated you should review your "encryption" and take what Deque wrote serious. Followed by what surely @"ArkPhaze" himself must just be dying to state himself as well!:lol::lub: RE: Password Manager V.1 - ArkPhaze - 05-22-2013 Nope, not this time lol. Deque mentioned pretty much all that needed to be said. I haven't looked at the code directly though, I'm off in 10 mins. @"Ex094" if interested I have some good hash utils written in python that you could incorporate. I would suggest cutting down on the line spacing though, 2 new lines per line of code makes the code harder to read lol. I usually only use new blank lines to separate my defs and other significant parts of the code. ![]() RE: Password Manager V.1 - MrGeek - 05-23-2013 Thanks a lot my bro ![]() nice work! I am gonna test. RE: Password Manager V.1 - Ex094 - 05-23-2013 @Deque Yes you are pretty much correct, I got myself confused between and Encryption and Encoding. Well that makes sense as the passwords are not secure at all. Can you explain what you suggested a little bit more (The master password part) @ArkPhaze Sorry about that, I've the same words for ya too ^^. For the spaces, yes I'll reduce em. Thanks for the suggestions guys. RE: Password Manager V.1 - RogueCoder - 05-23-2013 @"Ex094" a master password is a pass(word|phrase) used to decrypt encrypted content. It serves as a key when encrypting the data. To decrypt the content you need to provide this key which is why it must never be stored anywhere. At least this is my understanding of it, so feel free to correct me if I'm wrong ![]() |