Petapass
Petapass makes better passwords using stateless hashes.
The traditional approach to password management is to store passwords in an encrypted file (various password managers use this approach). Petapass instead implements a ‘stateless’ password management scheme (all state resides in your head). It uses a master password and per-login descriptive token to generate unique 10-character passwords. The token is merely something you will remember when you need to log in.
See this blog post for more information.
Usage
Petapass has a single script named petapass with various subcommands. It features two modes of operation: single and daemon. Enter your master password and a token - the generated password will be copied to the clipboard.
Single
Single mode uses a simple terminal UI. It allows you to generate a single password. Run petapass one in a shell.
Daemon
Daemon mode starts a long running-process using a hidden GTK window. The master password will be remembered for a user-configurable timeout. Upon activation, the window is displayed and a token can be entered
petapass daemon --help
usage: petapass daemon [-h] [--timeout TIMEOUT]
optional arguments:
-h, --help show this help message and exit
--timeout TIMEOUT how long to remember the master password, in minutes.
Default: 15
Show the window using petapass show. You may want to bind this to a hotkey in your window manager. The password entry box is reasonably intelligent and may be controlled using only tab/enter (it works as you would hope). Click the Cancel or hit the escape key to dismiss the window.
To clear the master password, click the Forget button or run petapass forget. You may want to add this command to your power management sleep hooks so that the master password is cleared when you suspend or hibernate your laptop - see the suspend directory in the source distribution.
Quit the daemon by pressing Control-q when the window is visible, or by running petapass kill.
Platform
Single mode works on Linux and OS X. Linux users need xclip, available in most distros repositories. Daemon mode requires pygtk. Petapass works on Python 2.7, or Python 2.6 with argparse.
Bugs
The window doesn’t always raise to the top & receive focus when shown. Adding Windows support should be trivial, but the author does not care to do so himself. Patches welcome. More bugs here.
1 maintainer
Metadata
1 maintainer
Release files for Petapass 0.2.1
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | Actions |
|---|---|---|---|---|
| Petapass-0.2.1.tar.gz | 5.0 kB | Without provenance | Details for Petapass-0.2.1.tar.gz |
Release files / Petapass-0.2.1.tar.gz
| Download URL | Petapass-0.2.1.tar.gz |
|---|---|
| Size | 5.0 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
d1fcabb158c1233aa584374b6eca661ca7ebb3a4866129f4c6c2dcbbe3e7e70b
|
|
BLAKE2b-256 checksum How to use checksums |
dbd1ca8e4d3a127b4b599526b93515309ff4e87b0a8cdba4f07241898026aa48
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
Security for Petapass 0.2.1
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
No provenance found
None of the files in this release were uploaded with provenance metadata.
A note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.
