pwdsafety

๐Ÿ”’command line tool checking password safety๐Ÿ”’

GPL-3.0 License

Stars
64

This tool doesn't store any information! Never use personal information in your password!

  • Use a password manager (I recommend bitwarden)
  • Don't use the same password for different services
  • Enable 2FA wherever possible

Get Started ๐ŸŽ‰

Snap

sudo snap install pwdsafety

Go1.17+

go install -v github.com/edoardottt/pwdsafety@latest

From source

  • First of all, clone the repo locally

    • git clone https://github.com/edoardottt/pwdsafety.git
  • pwdsafety has external dependencies, so they need to be pulled in:

    • cd pwdsafety/cmd && go get && cd ..
  • Linux (Requires high perms, run with sudo)

    • make linux (to install)

    • make unlinux (to uninstall)

  • Windows (executable works only in pwdsafety folder. Alias?)

    • make windows (to install)

    • make unwindows (to uninstall)

Description ๐Ÿ”ฆ

It reads from standard input the entered password. First, it searches if the password or the password reversed is a well known pwd. Then, just do little calculations, checking if the basic rules are respected, like if there are UPPERCASE CHARS, lowercase chars, numb3rs and symbols. It stores the length of the password and the ratio [unique different chars / total chars]. It calculates then the entropy of a password. Password entropy is a measurement of how unpredictable a password is. The formula for entropy is: formula

Where:

  • E = password entropy
  • R = pool of unique characters
  • L = number of characters in your password
  • Then R^L = the number of possible passwords

When the score <= 68(reasonable) it generates a random password.

Scoring ๐Ÿ’ฏ

Max score: 100

Scores:

  • Very weak: 0 - 35
  • Weak: 36 - 59
  • Reasonable: 60 - 68
  • Strong: 69 - 80
  • Very strong: 81 -100

Scoring parameters:

  • Found in known password
  • Found in known password reversed
  • Password composition:
    • numbers
    • symbols
    • uppercase
    • lowercase
  • Unique different characters
  • Length
  • Entropy

Contributing ๐Ÿ› 

Just open an issue / pull request.

Before opening a pull request, download golangci-lint and run

golangci-lint run

If there aren't errors, go ahead :)

See also CONTRIBUTING.md and CODE OF CONDUCT.md

Thanks to fabaff and ecnepsnai.

Changelog ๐Ÿ“Œ

Detailed changes for each release are documented in the release notes.

License ๐Ÿ“

This repository is under GNU General Public License v3.0. edoardoottavianelli.it to contact me.

Package Rankings
Top 5.76% on Proxy.golang.org