Master Password

[jNizM]

Master Password
Master Password is an application that never stores passwords.


Source

---

Master Password (GitHub)


Download (precompiled executable)

---

coming soon


Screenshot

---

How does it work?

---

All you need to remember is a username (e.g. your first and last name, an email address or a nickname) and a master password (which should ideally be long and complex). [optional add a seed file with another secret]

Then create a list of websites or applications (e.g. mail.google.com, autohotkey.com or steam) for which you want to create a password.

You can decide how complex [²] or long [³] your password for these applications can be.

Then you can copy the password (or temporarily). As soon as you close the application, everything is forgotten except for your list of applications.

No passwords are stored locally or in the cloud.

However, if you forget your username, master password or the optional seed list, you will no longer be able to generate the same passwords.


Usage/Examples

---

To start it, simply call the function MasterPassword()

Code: Select all

MasterPassword()
MasterPassword(, True) ; for DarkMode

To start the programme with extra protection (seed), specify a path to a file or place a file with the name seed.txt (default) in the same folder

Code: Select all

; checks whether a file with the name 'seed.txt' exists in the same folder.
MsterPassword()

; uses the file 'C:\private\secret.txt' as seed
MasterPassword("C:\private\secret.txt")

FAQ

---

Which algorithm is used?

Code: Select all

master_key    = PBKDF2-SHA512 (user_name, master_password (+ seed) )
site_key      = HMAC-SHA512 ( site_name + site_counter, master_key )
site_password = PW-TEMPLATE ( site_key )

What differentiates the password complexity (template)?

Code: Select all

Strong -> Are all characters contained in Ascii85 (see https://en.wikipedia.org/wiki/Ascii85)
Medium -> Are all characters contained in Base64  (see https://en.wikipedia.org/wiki/Base64)
PIN    -> Are only numbers from 0 to 9

Password length?

Code: Select all

The password length can be set for all from 4 to 64.
Strong -> Default = 32
Medium -> Default = 20
PIN    -> Default =  4

Test environment

---

Questions / Bugs / Issues

---

If you notice any kind of bugs or issues, report them here. Same for any kind of questions.


Copyright and License

---

[jNizM]

HTML Version

Source

---

Master Password (GitHub)

Screenshot

---

[ozzii]

Thanks for this jNizM

[william_ahk]

I like the idea of never having to store passwords. However I see one big issue about this. If one site's password needs to be changed, or is compromised, then the password generated based on a key and site name will no longer be useful. Unless changing the key and resetting the passwords of every site..

[jNizM]

That's why there is the "Site Counter" which is appended to the end of the account when generating. I.e. if you have to change the password for a website, then you increase the counter from 1 to 2 or 2 to 3.
This way you don't have to change the password for all accounts / websites. You just have to remember on which platform you increased the counter.

[jNizM]

Added HTML Version (see post #2)

[emmanuel d]

Hmm just tested it, and the html and the gui give different passwords.
And yes all settings were equal

Seems to work now, one must be doubleclicking that item

[emmanuel d]

Can i make a suggestion?
Put the html and the autohotkey next to each other.
in the html, for the site's use a listbox
if you run the ahk, read, and save the sites to the html.
if possible also save the count to the html too.
just saying

[eclarkusa]

I remember something vaguely being discussed in the IRC a long time ago about this very idea. Good to see that idea take off.