django-honeywords 0.1.0b1

Django implementation of the Honeywords Project

Django implementation of the Honeywords Project by Ari Juels and Ronald L. Rivest.

Generates a list of honeywords along with the actual user password on user registration. If the wrong compromised honeyword is used to login, the user account will be automatically deactivated.

Written for Django 2.2 on Python 3.6

Honeychecker Quick Link

Honeychecker

Quick Start

1. Install Django Honeywords:

   pip install django-honeywords

2. Add honeywords to INSTALLED_APPS in settings.py:

   INSTALLED_APPS = [
       ...
       'honeywords',
   ]

3. Create Honeywords table:

   ./manage.py makemigrations honeywords
   ./manage.py migrate

4. Add HONEYCHECKER_URI = http(s)://<url/ip>:<port> into settings.py:

   HONEYCHECKER_URI = 'http://192.168.56.101:55555'

5. Add honeywords.backends.HoneywordsBackend to the top of AUTHENTICATION_BACKENDS in settings.py (or add AUTHENTICATION_BACKENDS if missing):

   AUTHENTICATION_BACKENDS = [
      'honeywords.backends.HoneywordsBackend',
      'django.contrib.auth.backends.ModelBackend',
      ]

6. Download honeychecker.py to the Honeychecker server.

7. Edit the IP, PORT and DATABASE settings in honeychecker.py:

   ### Settings
   IP = '192.168.56.101'
   PORT = 55555
   DATABASE = 'honeychecker_db.sqlite3'
   ###

8. Run honeychecker.py on the Honeychecker server:

   python honeychecker.py

Documentation

TODO