KeepMyPass

About KeepMyPass

KeepMyPass is a Password-Management System built in Python using MySQL integration with a graphical-user interface. It was developed in June/July, 2020 as a Grade-XII (CBSE) Computer Science Project. It also contains an Event-Management and a Contact-Management System.

Acknowledgement & Certification

This project was done partly under assistance of my Grade-XII Computer Science teacher. It meets all the requirements of Grade-XII Computer Science Project, 2020-21, and covers the following concepts in elaborate detail:

Binary-Data File Handling through Python
MySQL Database Management through Python-MySQL integration using mysql.connector
Creating Graphical-User Interfaces using tkinter

Some features of the App

Information Feature

Help buttons are provided on various screens to assist the user navigate through the App.

Forgot-Password Feature

If a User forgets their MasterPassword, they can retrieve their lost Account using this feature.

Password-Generation Feature

The Secure-Vault contains a Password-Generator that generates (pseudo)random passwords.*

(Pseudo) Security Features

Binary Files include fake data records.*

The data being written into Binary File is encrypted twice.*

Only one User can log in at a time.

All data is stored in the database in encrypted format, and is decrypted only if the User wishes to see it.

The keys for encryption/decryption are unique for every User.

Admin-Mode Feature

Using a password-protected Admin-Mode, a person can search through all User-Vaults at once.* The search can be used to search specific records or all records of a particular type.

Footnotes & Security Issues

The project is vulenerable to insecure deserialization because it uses the Python module pickle.
The project mentions (in several places) that the passwords generated are 'secure'. Do note that the passwords are however pseudorandom, although an element of the password-generation function does use os.urandom().
The Admin-Mode feature has only been added to the project to meet the requirements set by CBSE. In no way should the feature be taken advantage of. I, the developer, completely understand that being able to access all the stored data, and providing its access to the end-users is problematic and unethical.
The implemented encryption technique solely comprises of different character-mappings and ROT-ciphers, i.e. no real encryption algorithm has been used in the project.
Inclusion of fake records in the Binary Files does not really affect the security of actual data records.
Encrypting the data twice has no added benefit as compared to encrypting it only once.
The type-hints were added to all the functions at a later date.
user_checker.py has only been added as a back-end functionality checker. It is not meant for use.

Illustration Credits

All illustrations used in the project have been taken from LastPass, and I claim that I, in no way, can and will use my project for commercial purposes whatsoever with these illustrations.

Run

To run, clone the repository on your device, navigate to the folder, and execute:

python3 main.py

Future Plans

Patch all possible Security Issues and involvement of real encryption/decryption algorithms
Improve UI/design
Use of an alternate package to handle Binary Files or implementation of an alternative method to store encryption/decryption keys
The password to the Admin-Mode should not be hard-coded into the file
Branch the project, wherein the Admin-Mode will be removed
Make the code more modular
Better and more professional type-hinting

divyajeettt/KeepMyPass