An online keepass-like password manager. Based on client-side AES encryption

[Batu69]

This password manager can generate and store random strong passwords for users. Passwords are generated on users' browsers and then encrypted using AES256 (mode CBC). Key for encryption is generated by PBKDF2 based on login password (Password_1)

PBKDF2 with SHA512 is used for user identification check. Raw password will be mapped to a pseudo password with a key related to Password_1 before applying AES256. The mapping algorithm is alphabet and position based.

Some part of information in Password_1 won't involve in calculations for identity check, So password_1 can't be obtained by enumerating password_0 (used for authentication).

 

You can read more information about implementation in wiki.

Extentions

You can easily add E-mail verification, Google authentication... in your version of password manager. Put your implementation inside check.php, which is used for login authentication.

 

DEMO

phppasswordmanager.sourceforge.net
This demo is for test ONLY! Do NOT put your real password there.
You can access the database for this demo here, with login username p2663268ro and password 12345678

Additional test demo available here: pas.jeffery.cc
This demo is for test purpose and might be unstable.

Features

1. Client side encryption. Server only keeps the encrypted strings.
2. Customized fields support. You can add/delete fields for the password manager. For example, you might want a URL field to keep login URL for all your accounts.
3. PIN login. You don't need to input your long login password everytime. Instead, you can use a short PIN, in your trusted devices.
4. Files support. You can attach files to accounts. Of course, files are encrypted in your browser before they are uploaded.
5. Tags support and searching support. This makes it easier to manage lots of accounts.
6. Import/Export as CSV file.
7. Easy to use backup/recovery.
8. Authentication control. Account/IP will be blocked for too many failed attempts. After a short time of no action, you'll sign out automatically.
9. Friendly UI.

 

Download zeruniverse Password-Manager

 

Article source

[straycat19]

This isn't something for the casual user since it requires PHP, My SQL Server, and Apache Web server to run.