Rudimentary Password Manager

Rudimentary Password Manager

Choosing a strong password nowadays seems like a difficult task considering how powerful computers are, they can break many of the encryption algorithms that are publicly available, and this is without counting the super computers used by our not-so-friendly friends in the National Security Agency — NSA. With the currently technology they could easily break your Tr0ub4dor&3 in no time, and with the advancements made in quantum computing I would not be surprised if biometrics become the standard to identify people in the future — I’m not saying that biometric information is a secure alternative though.

The Tr0ub4dor&3 is a reference to this webcomic.

Since we are not living in the future yet — or are we? — We have to rely on the current market and choose something that will work for the ~80% of the time (number completely made up). Fortunately there are dozens of tools that were designed to generate random and fairly strong passwords with support for rotation and synchronization.

Projects like KeePassX — which I strongly recommend — will make your life easier. I have been using it for quite some time, but recently I found myself thinking that I actually need something simpler but not necessarily as secure as these tools — which contradicts the sole purpose of having a password manager, but meh ¯\_(ツ)_/¯

openssl enc -aes-256-cbc    -in passwords.txt -out passwords.dat
openssl enc -aes-256-cbc -d -in passwords.dat -out passwords.txt

This is what I use to manage the information associated to the accounts that I have created in services that are not 100% important, simple enough eh? Using AES-256 will do the trick, but encrypting and decrypting a file every time you want to insert or read an account is not a good idea. I created this rudimentary password manager a while ago and I hope it is useful to you.

Do you have a project idea? Let's make it together!