Skip to main content

opqpwd is a password manager REST service with client-side encryption.

It is written in Python 3, using Django and Django REST framework.

opqpwd stands for “opaque passwords”: it encrypts password on the client-side, making them “opaque” to the server. Moreover, user registration and authentication is performed using salted hashes of user-chosen username and password: this boosts users anonimity with respect to traditional services, hiding even the service-registration username.

Passwords (and metadata) are stored in your favorite database as Base64-encoded, encrypted JSON. Encryption is performed using AES-256-CBC, with HMAC-SHA-256 authentication.

scrypt is used as key derivation function.

It features an example command-line client (you can find it in the bin folder).

opqpwd was written by Marco Bellaccini - marco.bellaccini(at!)gmail.com.

BEWARE: OPQPWD IS PROOF-OF-CONCEPT SOFTWARE, FOR TESTING PURPOSES ONLY.

Quick start

  1. Make sure you meet all software dependencies (Django REST Framework, scrypt - you’ll need libssl-dev for it, pycrypto, requests and, of course, Django).

  2. Add “opqpwd” and “rest_framework” (of course, you have to install Django REST Framework too!) to your INSTALLED_APPS setting like this:

    INSTALLED_APPS = [
        ...
        'rest_framework',
        'opqpwd',
    ]

    In the same file (settings.py), specify this custom authentication backend:

    # set custom authentication backend
    AUTHENTICATION_BACKENDS = ['opqpwd.authentication.UserCredBackend']
  3. Include the opqpwd URLconf in your project urls.py like this:

    url(r'^', include('opqpwd.urls')),

    Note: make sure you import include with from django.conf.urls import include.

  4. Run python manage.py migrate to create the opqpwd models.

  5. Start the development server (BEWARE: in a real environment you should run it over https, however, as already stated, THIS IS A PROOF-OF-CONCEPT SOFTWARE, FOR TESTING PURPOSES ONLY).

  6. Start the cli-client script:

    opqpwdcliclient

    Note: if you installed the package as a user library, the script will likely be in .local/bin in your home folder.

  7. Connect to the development server:

    connect http://127.0.0.1:8000
  8. Register a user:

    adduser

    (if you want, you can also generate an authentication token to use along with the password)

  9. Login:

    login
  10. Add a password to the db:

    addpassword
  11. List all stored passwords titles:

    printall
  12. Print details of the password you just stored:

    print 1
  13. Upload encrypted passwords to the server:

    save
  14. Get help with the other commands:

    help

Release files for django-opqpwd 0.1

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for django-opqpwd 0.1
File Size Uploaded
django-opqpwd-0.1.tar.gz 20.6 kB Details

Release files / django-opqpwd-0.1.tar.gz

Download URL django-opqpwd-0.1.tar.gz
Size 20.6 kB
Tags Source
SHA-256 checksum
How to use checksums
aa8ee044cf91443d149ad8f25393873f3f13770db5a7f2aeba84553e11c16def
BLAKE2b-256 checksum
How to use checksums
62ef066d8755bccc55661d48a5ead6c571acd411fd54c62ef2340feb2b1138df
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No

Release history Release notifications | RSS feed

This release

0.1 This release

1 release file

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page