DEV Community

Mate Technologies
Mate Technologies

Posted on

🔐 Building a Password Security Suite in Python (Step-by-Step)

#tutorial #python #passwordsecuritysuite #tkinter

This beginner-friendly tutorial walks through building a Password Security Suite using Python + Tkinter.

We’ll break the app into small, understandable steps, with short code blocks and explanations—perfect for a Dev.to article or learning project.

🧰 What We’re Building

By the end, you’ll have a desktop app that can:

Generate secure passwords

Calculate password entropy

Estimate crack time

Visually show password strength

Copy passwords safely (auto-clear clipboard)

Keep a password history vault

Export passwords to a .txt file

Check passwords against data breaches (HIBP API)

Toggle dark mode

📦 Step 1: Imports and Dependencies

We start by importing all required modules.

import sys
import os
import random
import string
import math
import time
import hashlib
import threading
import requests
import tkinter as tk
from tkinter import ttk, messagebox, filedialog
import sv_ttk
Enter fullscreen mode Exit fullscreen mode

Why these modules?

tkinter / ttk → GUI

random / string → password generation

math → entropy calculation

hashlib → SHA-1 hashing

requests → breach API check

threading / time → clipboard auto-clear

sv_ttk → modern UI theme

📁 Step 2: Helper Functions
Resource Path (for packaging later)

def resource_path(file_name):
    base_path = getattr(sys, "_MEIPASS", os.path.dirname(os.path.abspath(__file__)))
    return os.path.join(base_path, file_name)
Enter fullscreen mode Exit fullscreen mode

This ensures assets work both in development and bundled apps (like PyInstaller).

Status Bar Updates

def set_status(msg):
    status_var.set(msg)
    root.update_idletasks()
Enter fullscreen mode Exit fullscreen mode

Used to give live feedback to the user.

🪟 Step 3: App Window Setup

root = tk.Tk()
root.title("Password Security Suite")
root.geometry("720x680")
sv_ttk.set_theme("light")
Enter fullscreen mode Exit fullscreen mode

We create the main window and apply a modern light theme.

🌐 Step 4: Global State Variables

dark_mode_var = tk.BooleanVar(value=False)
show_password_var = tk.BooleanVar(value=False)
Enter fullscreen mode Exit fullscreen mode 
password_var = tk.StringVar()
entropy_var = tk.StringVar(value="Entropy: — bits")
crack_time_var = tk.StringVar(value="Time to crack: —")
Enter fullscreen mode Exit fullscreen mode

Tkinter variables automatically update UI widgets.

Password Options

length_var = tk.IntVar(value=14)
use_upper = tk.BooleanVar(value=True)
use_lower = tk.BooleanVar(value=True)
use_digits = tk.BooleanVar(value=True)
use_symbols = tk.BooleanVar(value=True)
Enter fullscreen mode Exit fullscreen mode

These control how passwords are generated.

🎨 Step 5: Dark Mode Toggle

def toggle_theme():
    bg = "#2E2E2E" if dark_mode_var.get() else "#FFFFFF"
    fg = "white" if dark_mode_var.get() else "black"
Enter fullscreen mode Exit fullscreen mode 
    root.configure(bg=bg)
    for w in ["TFrame", "TLabel", "TLabelframe", "TLabelframe.Label", "TCheckbutton"]:
        style.configure(w, background=bg, foreground=fg)
Enter fullscreen mode Exit fullscreen mode

Switches colors dynamically when the user enables dark mode.

🔢 Step 6: Password Entropy Calculation

def calculate_entropy(pwd):
    pool = 0
    if any(c.islower() for c in pwd): pool += 26
    if any(c.isupper() for c in pwd): pool += 26
    if any(c.isdigit() for c in pwd): pool += 10
    if any(c in string.punctuation for c in pwd): pool += len(string.punctuation)
Enter fullscreen mode Exit fullscreen mode 
    return round(len(pwd) * math.log2(pool), 2) if pool else 0
Enter fullscreen mode Exit fullscreen mode

Entropy measures how hard a password is to guess.

⏳ Step 7: Crack Time Estimation

GUESSES_PER_SECOND = 1e10
Enter fullscreen mode Exit fullscreen mode 
def estimate_crack_time(entropy):
    guesses = 2 ** entropy
    seconds = guesses / GUESSES_PER_SECOND
Enter fullscreen mode Exit fullscreen mode 
    units = [("years", 31536000), ("days", 86400), ("hours", 3600), ("minutes", 60)]
    for name, div in units:
        if seconds >= div:
            return f"{seconds/div:.2f} {name}"
    return f"{seconds:.2f} seconds"
Enter fullscreen mode Exit fullscreen mode

This assumes a realistic offline brute-force attack.

📊 Step 8: Strength Visualization

def update_strength_visuals(entropy):
    progress["value"] = min(entropy, 100)
Enter fullscreen mode Exit fullscreen mode 
    if entropy < 40:
        color, label = "red", "Weak ❌"
    elif entropy < 60:
        color, label = "orange", "Medium ⚠️"
    elif entropy < 80:
        color, label = "green", "Strong ✅"
    else:
        color, label = "purple", "Very Strong 🔥"
Enter fullscreen mode Exit fullscreen mode 
    style.configure("Entropy.Horizontal.TProgressbar", background=color)
    strength_label.config(text=label)
Enter fullscreen mode Exit fullscreen mode

Users instantly see how strong their password is.

🔐 Step 9: Password Generation

def generate_password():
    chars = ""
    if use_upper.get(): chars += string.ascii_uppercase
    if use_lower.get(): chars += string.ascii_lowercase
    if use_digits.get(): chars += string.digits
    if use_symbols.get(): chars += string.punctuation
Enter fullscreen mode Exit fullscreen mode 
    if not chars:
        messagebox.showwarning("Error", "Select at least one character type.")
        return
Enter fullscreen mode Exit fullscreen mode 
    pwd = "".join(random.choice(chars) for _ in range(length_var.get()))
    password_var.set(pwd)
Enter fullscreen mode Exit fullscreen mode 
    evaluate_password(pwd)
    add_to_history(pwd)
    check_breach(pwd)
Enter fullscreen mode Exit fullscreen mode

📋 Step 10: Clipboard Auto-Clear

def copy_password():
    root.clipboard_clear()
    root.clipboard_append(password_var.get())
    threading.Thread(target=clear_clipboard_timer, daemon=True).start()
Enter fullscreen mode Exit fullscreen mode 
def clear_clipboard_timer():
    time.sleep(15)
    root.clipboard_clear()
Enter fullscreen mode Exit fullscreen mode

This prevents passwords from lingering in memory.

📂 Step 11: Export Password History

def export_history_txt():
    file_path = filedialog.asksaveasfilename(defaultextension=".txt")
    if not file_path:
        return


    with open(file_path, "w") as f:
        for i, pwd in enumerate(password_history, 1):
            f.write(f"{i}. {pwd}\n")
Enter fullscreen mode Exit fullscreen mode

Allows safe offline storage.

🚨 Step 12: Breach Detection (HIBP)

def check_breach(pwd):
    sha1 = hashlib.sha1(pwd.encode()).hexdigest().upper()
    prefix, suffix = sha1[:5], sha1[5:]


    res = requests.get(f"https://api.pwnedpasswords.com/range/{prefix}")
    for line in res.text.splitlines():
        if suffix in line:
            messagebox.showwarning("Breach Found", "Password found in breaches!")
Enter fullscreen mode Exit fullscreen mode

Uses k-anonymity, so the full password is never sent.

🧱 Step 13: UI Layout (Tkinter)

We use Frame, Label, Entry, Button, and Progressbar widgets to build the interface.

This section is mostly visual, so feel free to experiment with spacing and styles.

▶️ Step 14: Run the App

root.mainloop()
Enter fullscreen mode Exit fullscreen mode

This starts the Tkinter event loop.

🎉 Final Thoughts

You’ve built a real-world security-focused desktop app with:

Cryptography

API usage

Threading

UI design

Perfect for:

Portfolios

Learning Python GUIs

Security fundamentals

Happy hacking! 🚀

Password Security Suite

Top comments (0)