A simple, secure password storage tool which allows you to keep all your passwords in one encrypted file. For Windows, Mac, Linux, Solaris.

This application is inspired by Bruce Schneier's Password Safe program.

At first, I needed to have a cross-platform tool that I could run on Mac, Windows, and Linux.

Then I discovered that a SHA-256 hash of the stretched key in the original Password Safe file is provided in the clear. The documentation explains that it "is used to verify that the user has the correct passphrase". I am not so sure. I don't know if the opposition has rainbow tables or specialized hardware to brute force 256 bit hashes, but it feels like a backdoor. In any case, this goal that can be easily achieved in a more secure way by using, for instance, authenticated encryption.

Encrypted data file format: EncryptionHandlerV4.
Encryption relies on a memory-safe Bouncycastle fork MemSafeCrypto.

Requires Java 17+.

This project and its source code is licensed under the Apache License 2.0 and you should feel free to make adaptations of this work. Please see the included LICENSE file for further details.

goryachev.com

Release Notes