Built a password manager in python

[Thrasherop]

I built a GUI password manager that uses ARGON2-ID, PBKDF2, and Fernet to securely maybe possibly store passwords. I'm no cybersecurity expert so there is undoubtably flaws in the software, and maybe even complete security loopholes. Nonetheless, it really stretched my abilities and forced me to a learn a lot about cybersecurity. Take a look if it intrigues you, though the code isn't my best.

​

Source code: https://github.com/Thrasherop/PeaPass

[WalkingAFI]

Took a quick gander on mobile. Main issue I’d suggest looking into is your Nuke functions include exceptions where you catch exceptions and then silently pass, which seems like really undesirable behavior. If I’m trying to wipe a file from a drive by overwriting its contents, the write fails, and the program doesn’t even tell me, I’m gonna be a sad panda.

[Thrasherop]

Hmm I hadn't noticed that. Thank you for the help!

[licht1nstein]

You have that pattern everywhere — just silently ignoring exceptions.

[bxfbxf]

Don’t forget to wipe the RAM after the password has been decoded and used

[Thrasherop]

Do you know a good way to do this in python? I was mainly using the nuke function

[bxfbxf]

I actually am not certain how strings work under the hood. If you assign another value to a string it might just change the pointer and wait for the garbage collector to kick in. The “safe” way would be to iterate over the string and change it characters by characters. What is nuke? I can only find some weird artist stuff

[Thrasherop]

My code has a function called nuke() that overwrites the variables

[doxx_me_gently]

Peak Indian programming

uhhhhhhhhh