Vault Plus is a local password manager that is created to demonstrate one of the use cases of the Sequence Based Two-Factor Authentication (2FA) Method. This is a new 2FA method that works by having users derive OTP (One Time Password) from a pre-generated sequence of characters, eliminating the need to have a physical device to use 2FA both online and offline.
More details can be found in the paper.
Note: Vault Plus encrypts user passwords but, it doesn't encrypt the database (.db) files. This functionality of the encrypting the database (.db) files will be provided in the future.
There are two ways of using this 2FA method:
- Online
- Offline
In this version, the user will receive a random 9-digit code via email, and then the user will use the code and their sequence to derive an OTP and use that OTP for authentication. A new randomly generated code is sent every 60 seconds. Sending the random codes to the email address of the user increases security. Click here to see the full demo.
In this version, a random 9-digit code is shown within the application. This code is updated every 60 seconds. Generating the random codes within the application improves usability. Click here to see the full demo.
- The GUI (Graphical User Interface) application is made using
PyQt5. - The database used is
SQLite. - The user's master password is encrypted using
SHA256. - The user's password for a service (i.e. Amazon, Google etc.) is encrypted using
AES256.
Open Anaconda Prompt and create a conda environment using the following command:
conda env create -f environment.yaml
For using an online implementation of this 2FA method, you'll need to enter your email address and password to the config file. If you're using Gmail as the provider, you'll need to tell Google to allow you to connect via SMTP. For many other email providers, you won't need to do any of the extra steps that I describe here.
-
You'll need to turn on allow less secure apps to access your account. For detailed instructions on how to do this, you should check out this page.
-
If you have 2-step verification enabled on your account, then you'll need to create an app-specific password for less secure apps like this. In that case, you'll need to follow the instructions here.
- Clone this repository.
git clone https://github.com/devanshamin/Vault-Plus.git
- Open Anaconda Prompt and type the following commands.
conda activate vaultplus
cd Vault-Plus
python main.py
- Support for encrypting the database (.db) files.
Open source licensed under the MIT license (see LICENSE file for details).