clipw

Python3 Powered Command Line Password Manager

Description:

Clipw is a very simply, secure (audits welcome) command line interface, python3 powered password manager utilizing AES-256 (via *pure python powered* pyaes)! Store passwords, along with a description; with the option to create secure random passwords. Notice: This is work in progress. New features will be added as I get to them. If you want to fork and help out, pull requests are welcome.

Note: So far only tested on Android (termux) & Linux - TODO: test on windows , osx, etc

Features:

• Fast sqlite powered database
  • simple db structure
  • --init_database function makes copy of old db first
  • TODO: Add fields for timestamp, URL, username, etc
• Passwords encrypted in AES-CRT 256
  • no system compiled libaries needed (unlike pycrypto)
  • Encrypted with a master passphrase (hashed & salted 1000000x via sha-256)
• Libs organized into neat packages for easy reuse or expansion
  • For developers: Portable libraries for AES, Password Hashing, SQL, and configuration
• Easy install via setup.py script
• Option to store or generate a random password of n length
• Simple cli friendly interface
  • Interactive mode
    • Keeps db unlocked until timeout expires for security
  • Quick command line functionality with argparse
    • see usage below
  • Reset console after timeout/on program exit(for security)
  • Timeout time configurable
    • defaults to 600 seconds / 10 minutes
• Pure python3
  • Encryption uses pyaes, no OS libraries needed.
  • Dependencies minimized, only needs pyaes

Installation:

• Clone this repository to your computer.
• Run pip3 install -r requirements.txt to install dependencies
• Install via setup.py:

$ python3 setup.py build
$ python3 setup.py install --user

Usage:

usage: clipw [-h] [--init] [-i] [-t, TIMEOUT] [-o] [-s] [-e] [-d]
             [-r [GEN_RANDOM [GEN_RANDOM ...]]]

Python Cli Password Manager

optional arguments:
  -h, --help            show this help message and exit
  --init, --init_database
                        Re|Init Database
  -i, --interactive     Interactive mode
  -t, TIMEOUT, --timeout TIMEOUT
                        Override timeout - close afterthis amount of seconds.
  -o, --open            Open the password database
  -s, --store           Enter and store a new password in the database
  -e, --edit            Edit an entry.
  -d, --delete          Delete an entry
  -r [GEN_RANDOM [GEN_RANDOM ...]], --random [GEN_RANDOM [GEN_RANDOM ...]]
                        Generate and store a random password of n length

First, run with --init_database. You will be prompted to enter a master passphrase which will be used to encrypt all of the passwords which you store in the database. Key must be at least 8 and up to 32 characters long. Pick a strong master passphrase.

New: Interactive mode (clipw -i)

Interactive mode keeps the program open without having to re-enter the key over and over over every time you need to retrieve a password. TODO: add a timeout feature

$ clipw -i
Master Password: 
Success!
Running in interactive mode.
Enter action: store (s), generate: (g), open and select entry: (o), edit entry: (e), delete entry: (d), quit program (q)

Generate a random password 8 characters long:

$ clipw.py -r 8 
Master Password: 
Success!
Description: test4
Password: cnY{2k"6|@Ho

Store a password into the database:

$ clipw.py -s
Master Password: 
Success!
Description: test 
Password: 
Confirm: 
Stored password ok.

Open the database and retrieve a password:

Master Password: 
Success!
ID:  0 Description test 1
ID:  1 Description gmail
ID:  2 Description github
ID:  3 Description test 2
Enter ID of password to decrypt: 3
Retrieving ID  3
Id:  3
Description: test test 
Password: lol

Flowchart / Psuedocode

Functions:

• init database:

  • input master key
    • Check keysize - add padding for AES compliance if necessary
  • hash & salt master key
  • store hash in file
  • create empty database

• generate_password / store:

  • store from getpass || generate random password
  • encrypt password
  • get description data
  • append to db: encrypted password with description data

• open_database:

  • prompt use for master key
  • check master key against stored hash
  • if correct:
    • open database
    • iterate through database
    • display description with numeric id
    • prompt for id of password to retrieve
    • show password
    • clean exit (security features:)
      • remove AES key from memory
      • reset console
  • if incorrect:
    • prompt to try again (?)
    • nah, just exit

• Interactive Mode:

  • Run in while loop
    • Get selection (store (s), generate: (g), open and select entry: (o), edit entry: (e), delete entry: (d), quit program (q))
    • Perform action
    • Repeat until SIGINT or Lock Timeout reached then break
      • clean master key from memory
      • exit