loxodo-curses 0.32.0

A Password Safe V3 compatible password vault

loxodo-curses

loxodo-curses is a curses frontend to Password Safe V3 compatible Password Vault. A fork of Loxodo.

Editing a record is done with Vim, using an anonymous file in memory (os.memfd_create). To launch a URL, xdg-open is used, while copying to the clipboard is handled by xsel.

To generate a password, just run the command “:read !pwmake 96” in Vim (pwmake is part of libpwquality) or “:read !diceware -d ‘ ‘ -s 2” (diceware) or “:read !pwgen -s 25” (pwgen).

The app includes a timeout feature that automatically closes it after 30 minutes of inactivity.

Security considerations

This code handles private key material and is written in Python. No precautions have been taken to lock pages in memory to prevent swapping. Also no attempt is currently made to securely dispose of memory that may have held private key material.

The current hotkeys

• F1: help screen

• q, Esc: Quit the program

• j, Down: Move selection down

• k, Up: Move selection up

• PgUp: Page up

• PgDown: Page down

• g, Home: Move to first item

• G, End: Move to last item

• Alt-{t,u,m,c,g}: Sort by title, user, modtime, created, group

• Alt-{T,U,M,C,G}: Sort reversed

• Delete: Delete current record

• Insert: Insert record

• d: Duplicate current record

• e: Edit current record w/o password

• E: Edit current record w/ password

• L: Launch URL

• s: Search records

• P: Change vault password

• Ctrl-T: Copy Title to clipboard

• Ctrl-U: Copy Username to clipboard

• Ctrl-P: Copy Password to clipboard

• Ctrl-L: Copy URL to clipboard

• Ctrl-O: Copy TOTP to clipboard