DEV Community: Alex

Let's discuss a Password Manager for the Apocalypse Era.

Alex — Sun, 21 May 2023 19:00:35 +0000

First, it should be something you can print out (preferably on heat-resistant titanium plates 💥 🔥 ) and then scan to a file and run. (It's a bit of a joke requirement, though why not?).

Second, you wouldn't need to use external programs to access your passwords (you just might not have them at your disposal).

Third, your secrets should not only be resistant to quantum computing, but also provide a proven impossibility 🤖 to decrypt in the absence of a key.

So, I am working on a pet project 😺 of such a container for secrets where all secrets are stored encrypted in a single HTML file which requires only a web browser to open and you do not need to be online.

What other features should be included into such a password manager? 🤔

What motivated me to start working on a secure container?

Alex — Sat, 13 May 2023 08:38:56 +0000

One of the user stories:

I'm on a trip, far from home, and I accidentally drop my phone in a mountain river. A tiny kiosk at the foot of a mountain is all civilization for dozens of miles around.

After the trip, I promised to stop by my university friend who lived in a nearby village. But his phone number had become unavailable to me. 😧

At the kiosk, a friendly guy 🤠, gives me his phone, with which I go to my public static page on Github, and open a secure container, which, among other things, stores my friend's phone number. I enter my username and password and write down my friend's address and phone number.

All the while, the guy who owns the computer is staring curiously at the screen...

In the container, besides my friend's phone, are all my family members' social media passwords, all our credit card numbers, passwords for bank accounts and cloud services my business uses.

Am I out of my mind? Consider it so! 🤪
Try the examples on the project site to see why all my secrets are safe.

I keep all my secrets in one file, copying that file to public services and giving it out to friends to increase the reliability of the storage.

But all the smiling guy at the kiosk could get, even with a man-in-the-middle (MITM) and a keylogger, is a few of my university friends' phones...

Is that a bad thing? Of course it is! 🙀

The story is fictional; all coincidences are coincidental. 😂

P.S. Smiling guy, thanks for your help! 🤠

griffin-container / griffin

Read-only 100% offline secure multi-user container in a single HTML file that requires no external software to extract secrets

G R I F F I N

SECURE CONTAINERS FOR HUMANS & ROBOTS

Read-only 100% offline secure multi-user container in a single HTML file that requires no external software to extract secrets.

Neither usernames, nor credentials, nor hashes are stored in the container, saved by the browser, or transmitted over the network.

Download a brand new empty container

Go to the latest version
Click the Download button (top-right corner)

Create your first container

Go to menu (top-left corner) and choose:
Create container from source…
Use hello-world.xml container source
to create hello-world.html container
Explore public, private and shared resources
username: alice, password: rabbit
username: bob , password: dog

That's it!

GET MORE_

Programmatic access…
Digital signatures…
XOR masks, Shamir's secret sharing etc…

More examples…

View on GitHub

GRIFFIN: Secure Containers for Humans & Robots

Alex — Wed, 10 May 2023 19:47:43 +0000

Hi! I would like to present you my pet project for those who are interested in storing secret information in portable secure containers.

Neither usernames, nor credentials, nor hashes are stored in the container, saved by the browser, or transmitted over the network.

The project is still at a very early stage of development, but you can try examples or create your own secure container.

I look forward to your feedback!

griffin-container / griffin

Read-only 100% offline secure multi-user container in a single HTML file that requires no external software to extract secrets

G R I F F I N

SECURE CONTAINERS FOR HUMANS & ROBOTS

Read-only 100% offline secure multi-user container in a single HTML file that requires no external software to extract secrets.

Neither usernames, nor credentials, nor hashes are stored in the container, saved by the browser, or transmitted over the network.

Download a brand new empty container

Go to the latest version
Click the Download button (top-right corner)

Create your first container

Go to menu (top-left corner) and choose:
Create container from source…
Use hello-world.xml container source
to create hello-world.html container
Explore public, private and shared resources
username: alice, password: rabbit
username: bob , password: dog

That's it!

GET MORE_

Programmatic access…
Digital signatures…
XOR masks, Shamir's secret sharing etc…

More examples…

View on GitHub

DEV Community: Alex

Let's discuss a Password Manager for the Apocalypse Era.

What motivated me to start working on a secure container?

griffin-container / griffin

Read-only 100% offline secure multi-user container in a single HTML file that requires no external software to extract secrets

G R I F F I NSECURE CONTAINERS FOR HUMANS & ROBOTS

Download a brand new empty container

Create your first container

GRIFFIN: Secure Containers for Humans & Robots

griffin-container / griffin

Read-only 100% offline secure multi-user container in a single HTML file that requires no external software to extract secrets

G R I F F I NSECURE CONTAINERS FOR HUMANS & ROBOTS

Download a brand new empty container

Create your first container

G R I F F I N

SECURE CONTAINERS FOR HUMANS & ROBOTS

G R I F F I N

SECURE CONTAINERS FOR HUMANS & ROBOTS