Mr. Password

Mr. Password is a 1PasswordAnywhere-like password vault that uses only the Dropbox API as a backend.

Encryption and decryption is handled by SJCL and only encrypted data is ever stored on Dropbox.

Try It

Here's one hosted on my site:

https://ryanfunduk.com/mrpassword

Hosted on my site...? With minified assets!? Did your eyes just bulge? Well, the source is hosted by me, but you login using Dropbox OAuth and your data is stored on YOUR Dropbox. Also the app also has a purge data function you can use if you decide to run away :)

If you're really paranoid though...

Run your own

Since this project is open-source, you can clone/fork it and look at the code for yourself and decide if this is a good idea or not. If you do so and decide it's a good idea, you can run your own version locally or wherever you want (well, almost, Dropbox requires SSL for OAuth apps except for localhost... but you can self-sign if necessary).

Requirements

• Node.js 0.8+ and NPM
• Grunt (npm install -g grunt-cli)
• Bower 1.3+ (npm install -g bower)
• A Dropbox 'App Folder' app

Setup

Get the repo and run:

npm install
bower install

Setup your Dropbox application with http://localhost:9000/ as a OAuth2 redirect URI. Make sure it has the 'App Folder' permission. Also take note of your 'App key'.

Running the App

grunt serve --dropboxApiKey APP_KEY

The app should hopefully be running localhost:9000 momentarily.

You can also put the app key into a file named .dropboxApiKey in the root of the app (alongside this README) and it will be picked up without the command line option.

Running the Tests

Run the tests with:

grunt test

Both serve and test stay running watching for changes.

Release Build/Deployment

Finally,

grunt build --dropboxApiKey APP_KEY

This dumps the final packaged up app into ./dist. There are 2 deploy scripts in the deploy directory.

• deploy/remote copies the files via rsync to a remote server. Eg. deploy/remote yoursite.com:/var/www/yoursite/mrpassword