sec-password

A small Python library that aids in securely storing and authenticating passwords.

Based on best practice suggestions from: https://crackstation.net/hashing-security.htm?=rd

Usage

>>> hashed = hash_password(
...    password='secure password',
...    key='string from keyfile',
...    iterations=500
... )
>>> verify_password(
...    stored_password=hashed,
...    provided_password='secure password',
...    key='string from keyfile',
...    iterations=500
... )
True

Note that iterations is a multiplied by 1,000. 500 is probably a reasonable default.

Keyed Hashes

If key is used it should be a string read from a file or outside source that is not stored in the database or hardcoded into the program.

Keyed Hashes are not required. By default an empty string is used.

See https://crackstation.net/hashing-security.htm?=rd for Keyed Hashes

Installation

poetry add sec-password

pip install sec-password

Metadata

Release files for sec-password 0.1.2

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for sec-password 0.1.2
File	Size	Uploaded	Provenance
sec-password-0.1.2.tar.gz	2.1 kB	Dec 19, 2020	Without provenance	Details

Built distribution (wheel)

Table of built distributions (wheels) for sec-password 0.1.2
File	Interpreter	ABI	Platform	Reset
sec_password-0.1.2-py3-none-any.whl 2.4 kB Dec 19, 2020 Without provenance	Python 3	none	any	Details

Total release size: 4.5 kB

Release files / sec-password-0.1.2.tar.gz

Download URL	sec-password-0.1.2.tar.gz
Size	2.1 kB
Tags	Source
SHA-256 checksum How to use checksums	`aafae7cacbdb7608133e913e00c9801b1d9d5e01146f6645ad61e86cba964256`
BLAKE2b-256 checksum How to use checksums	`f58f73a3b46cfa9b47b1e027e95fdfe8c08eba962f65629a27d3d96c42722d55`
Upload date	Dec 19, 2020
Uploaded using Trusted Publishing? What is trusted publishing?	No
Uploaded via	`poetry/1.1.4 CPython/3.8.6 Linux/5.8.0-7630-generic`

Release files / sec_password-0.1.2-py3-none-any.whl

Download URL	sec_password-0.1.2-py3-none-any.whl
Size	2.4 kB
Tags	Python 3
SHA-256 checksum How to use checksums	`02e5b7e3636c8c96648bf8e223c2cdbdb7aa7adc8928861498e6b4360bd2ec8e`
BLAKE2b-256 checksum How to use checksums	`0af85963229c71a6a66d0d1f2e4a6376db7a09c77aa0c6c9d552ff46da31f64c`
Upload date	Dec 19, 2020
Uploaded using Trusted Publishing? What is trusted publishing?	No
Uploaded via	`poetry/1.1.4 CPython/3.8.6 Linux/5.8.0-7630-generic`

Security for sec-password 0.1.2

Report project as malware

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

No provenance found

None of the files in this release were uploaded with provenance metadata.

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

To learn more about protecting yourself from malicious actors, visit our package security documentation.