NOTICE:
I am also working on a Muragala C# library and CLI Application. I also plan to turn
it into a GUI Application. I will continue to improve the Python repo as well and it
will continue to act as the main place for testing the ideas and improvements.
💸 Please consider donating on Paypal to keep this project alive.
Links: Password Manager Python, Password Manager C# CLI and Library, Password Manager C# GUI
Muragala is a password manager designed to make managing passwords easy and secure. My goal is to make it a secure and reliable password manager available in the public domain for everyone to use. Privacy and security is for everyone, this is the core value behind this project. It uses Fernet encryption to encrypt passwords and store them on a database. It uses two factor authentication with a password and randomly generated salt to encrypt the database. The application is built to be as simple as possible to make sure it's secure. On the other hand, this project is an experiment to see how to make a better security application.
Please note that I am still learning and this project has also been a way to expand my knowledge. Any suggestions, issues and ideas are more than welcome. On the other hand, this application is still in its alpha phase. Therefore please don't use it solely for personal usage. It might have severe bugs and issues regarding functionality and security.
- Cryptography - This module is used for all the cryptographic work. This is an important library.
- Pyperclip - This module is only used for copying content to the clipboard. Can be skipped if not necessary.
Go to the Releases section. Pick a prefered release and download it. Unpack the zip file. Optionally, you can hash the password-manager.py file on a service and compare it with the provided hashes to validate. Make sure that the help.json file is in the right place as well (In the same folder). If you don't have python installed, you can install python. Once done, open the command prompt or terminal. Install the cryptography module using the following command.
pip install cryptography
Additionally, you can also install the pyperclip library as well. This is optional but the copy command will not work if you opt out.
pip install pyperclip
Now you double click on the password-manager.py or run it from command prompt itself. Enjoy! Make sure to give feedback.
On opening the application for the first time, the application will create the database and preference file. This includes setting up the salt, which requires your password. As soon as you open up for the first time, it will ask for a password. Provide a prefered password. Make sure to remember this as it is what keeps the data protected. Once done, you will be loaded into the application. Now you can continue to use it. Optionally, you can also backup the preference.en file created in the same directory in case of an emergency.
NOTE: The salt or password alone cannot be used to recover the data in the database. Make sure to preserve both. Also note that the application is still in the Alpha phase.
The application has several useful commands built in. These allow for adding, editing, deleting and also viewing passwords to and from the database.
- ❓ help - This command will list out help information for the application.
help[List out all the commands and their details]help <command>[This will list out information for the specified command]
- ⛔ exit - This command will exit the application.
- ❗ about - This command will show the about information of the application.
- 🕓 version - This command will show the version number of the application that you're using.
- ➕ add - This command will add a new profile to the database.
add[Loads the add command with auto-generated password of default size and character set]add <size> <arguements>[Loads the add command with auto-generated password of size provided and character set provided]add -m[Loads the add command with a manual password]arguement set - -u(Include uppercase) -n(Include numbers) -c(Include special characters)
ex: 'add 13 -c -u' will auto-generate a password 13 characters long with only lowercase, uppercase and special characters
- ✏️ edit - This command will edit an existing profile in the database.
edit <platform> <username>[Loads the edit command with auto-generated password of default size and character set for the provided platform and username]edit <platform> <username> <size> <arguements>[Loads the edit command with auto-generated password of size provided and character set provided]edit <platform> <username> -m[Loads the edit command with a manual password]arguement set - -u(Include uppercase) -n(Include numbers) -c(Include special characters)
ex: 'edit Instagram Frank 13 -c -u' will auto-generate a password 13 characters long with only lowercase, uppercase and special characters
- 🗑️ delete - This command will delete an existing profile in the database.
delete <platform> <username>[Loads the delete command for the platform and username]
- 👀 show - This command will show the password of an existing profile in the database.
show <platform> <username>[Loads the show command for the platform and username]
- 🗒️ copy - This command will copy the password of an existing profile in the database.
copy <platform> <username>[Loads the copy command for the platform and username]
- 🌏 platforms - This command will list out the platforms in the database.
platforms[Will list all the platforms listed in the database]platforms <keyword>[Will list all the platforms listed in the database that match the keyword]platforms <keyword> <row>[Will list all the platforms listed in the database that match the keyword and will list them in the specified row count]
- 👩🦰 username - This command will list out the usernames in the database.
username[Will list all the usernames listed in the database]username <keyword>[Will list all the usernames listed in the database that match the keyword]username <keyword> <platform>[Will list all the usernames listed in the database that match the keyword and platform name]username -a <platform>[Will list all the usernames listed in the database that match only the platform name]username <keyword or -a> <platform> <rows>[Will list all the usernames listed in the database that match the keyword (or all if -a is provided) and platform name and will list them in the specified row count]
The database is a basic text file and data is stored to it in JSON format. However, each item is stored as an encrypted string, encrypted using the Fernet encryption.
{"Platform 01" : [{"User 01" : ["Password", "Modified Date"]}, ...], ...}
Each of these parameters are encrypted individually. Fernet encryption requires a salt and password to decrypt. Thus, we can modify the password to store different items in different formats.
Version 1.0.0 Alpha [12/01/2022]
NOTE: This is the initial release and has a security flaw
MD5:
DAE420C84E57026B7B51DEA8E78637F2SHA1:
F54C135E6257A9C3FA58B2ED953625D120AE8A1FSHA256:
3E0D95A22F8514AF496E1D27B02D3A2A0C1B7A4821CDC76F5DF5D3B19C0F6591
- Support for Encryption
- Add, Edit, Delete functionality
- Viewing and copying functionality
- Help and About sections
- Setting up a passcode
Version 2.1.1 Alpha [30/01/2022]
NOTE: This is a security patch
MD5:
05a817d7d2a03e692aeb0524e7ca002cSHA1:
e190058a3e75dda7fc203e11a5c943fe4a6fb699SHA256:
74f4a8eaa0b7d18fcd40235717ff88d7c4710af5cc0d41948c39e9884613dd04
Changelog
- Fixed the security key of saving the key
- Fixed the wrong command listed in the help file
- Added the option to get a new line by pressing enter key
- Suggest new features
📝 NOTE: Throughout the application, Passcode refers to the root password set for the password manager and Password refers to the password of the application.
© 2022 Asanka Sovis