Password Manager

Password Manager allows to store its passwords in a centralized and secure way. Indeed the passwords are encrypted on the client workstation with the current standards (see details below). Thus, the web service never has clear passwords in its possession, and has no way to decipher them.

Password Manager

Google Chrome / Opera / Vivaldi extension

The extension for browsers based on Chromium (Google Chrome, Opera, Vivaldi) automatically fills the form of the current page.

  1. Download extension
  2. Extract the archive
  3. Open the page: chrome://extensions
  4. Click on the button Developper mode
  5. Click on the button Load unpacked extension... and select the folder containing the extension

The icon appears to the right of the address bar. Click on it to open PasswordManager.

Password Manager

Bookmarklet

It is possible to replace the extension with a bookmarklet. To do this, create a bookmark with the following url:

javascript:document.location = "meziantoupasswordmanager:search?url="+ encodeURIComponent(document.location.href)

Security

  1. Upon creation of the user account, a bi-key (RSA) is generated on the client computer
  2. The private key is encrypted with the master key
  3. When creating a password, it is encrypted with a unique generated 256-bit AES key
  4. The AES key is encrypted with the public key of the user

⇒ All encryption operations are performed on the client computer (not on the server). Moreover, the web service never has the private key in its possession and therefore can not decipher the passwords.

Sharing of passwords

It is possible to share an entry with another user of the service:

  1. The AES key of the password is decrypted with the private key
  2. The application retrieves the public key of the user with whom the password is shared and encrypts the AES key using it
  3. The encrypted key is sent to the service

Clipboard

The sensitive information copied to the clipboard are automatically deleted after a few seconds. Thus, sensitive data does not stay in the memory.

Disclaimer

The software is provided "AS IS" without any warranty, either expressed or implied, including, but not limited to, the implied warranties of merchantability and fitness for a particular purpose. The author will not be liable for any special, incidental, consequential or indirect damages due to loss of data or any other reason.

Feedback

If you have any problem, suggestion, comment, or you found a bug in my utility, you can send a message to contact@meziantou.net.

Download