passthesalt 3.0.0

Deterministic password generation and password storage.

A command line application for deterministic password generation and password storage.

Getting started

Install it using

pip install passthesalt

and start storing secrets with

pts add

How does it work?

Secrets are generated on the fly using the same secure algorithm each time which uses a master password and a description of the password. Only the description of the secret is stored. This means the secrets are not stored anywhere.

The generation algorithm is PBKDF2 using 2048 iterations of HMAC-SHA-256, applied to (full name + master password) as the key and the description as the salt.

Since sometimes you cannot choose your passwords the application also has provision to securely encrypt secrets with the master password.

Usage

The command line interface has the following commands

add      Add a secret.
diff     Compare two stores.
encrypt  Encrypt a secret.
get      Retrieve a secret.
ls       List the secrets.
mv       Relabel a secret.
pull     Retrieve a remote store.
push     Update the remote store.
rm       Remove a secret.

All commands and options are documented in the cli. You can use the --help option with any command.

Migrating from version 2.3.0

The storage format changed between version 2.x.x and 3.x.x. To migrate to the latest version of PassTheSalt you should first dump your 2.x.x store

pts dump -o passthesalt-v2-dump.json

Then upgrade your PassTheSalt

pip install --upgrade passthesalt

Finally, migrate the secrets

pts migrate -i passthesalt-v2-dump.json

Be sure to first verify that your passwords still work! If so then delete the passthesalt-v2-dump.json file.

License

This project is licensed under the MIT License. See the LICENSE file.