Skip to main content

It's like SnapChat... for Passwords.

Project description

Latest version released on PyPI Build status

It’s like SnapChat… for Passwords.

This is a webapp that lets you share passwords securely.

Let’s say you have a password. You want to give it to your coworker, Jane. You could email it to her, but then it’s in her email, which might be backed up, and probably is in some storage device controlled by the NSA.

You could send it to her over chat, but chances are Jane logs all her messages because she uses Google Talk, and Google Talk logs everything.

You could write it down, but you can’t find a pen, and there’s way too many characters because your Security Person, Paul, is paranoid.

So we built SnapPass. It’s not that complicated, it does one thing. If Jane gets a link to the password and never looks at it, the password goes away. If the NSA gets a hold of the link, and they look at the password… well they have the password. Also, Jane can’t get the password, but now Jane knows that not only is someone looking in her email, they are clicking on links.

Anyway, this took us very little time to write, but we figure we’d save you the trouble of writing it yourself, because maybe you are busy and have other things to do. Enjoy.

Security

Passwords are encrypted using Fernet symmetric encryption, from the cryptography library. A random unique key is generated for each password, and is never stored; it is rather sent as part of the password link. This means that even if someone has access to the Redis store, the passwords are still safe.

Requirements

  • Redis.

  • Python 2.6, 2.7 or 3.3+.

Installation

$ pip install snappass
$ snappass
* Running on http://0.0.0.0:5000/
* Restarting with reloader

Configuration

You can configure the following via environment variables.

SECRET_KEY this should be a unique key that’s used to sign key. This should be kept secret. See the Flask Documentation for more information.

DEBUG to run Flask web server in debug mode. See the Flask Documentation for more information.

STATIC_URL this should be the location of your static assets. You might not need to change this.

NO_SSL if you are not using SSL.

REDIS_HOST this should be set by Redis, but you can override it if you want. Defaults to “localhost”

REDIS_PORT is the port redis is serving on, defaults to 6379

SNAPPASS_REDIS_DB is the database that you want to use on this redis server. Defaults to db 0

REDIS_URL is optional and, if set, will be used instead of REDIS_HOST, REDIS_PORT, and SNAPPASS_REDIS_DB to configure the Redis client object. For example: redis://username:password@localhost:6379/0

Docker

Alternatively, you can use Docker and Docker Compose to install and run SnapPass:

$ docker-compose up -d

This will pull all dependencies, i.e. Redis and appropriate Python version (3.6), then start up SnapPass and Redis server. SnapPass server is accessible at: http://localhost:5000

Credits

“snappass” is originally written and by Owen Coutts and Ryan Park.

It is currently maintained by Nicholas Charriere and Yongwen Xu from Pinterest.

Thanks a lot for the contributions of:

  • Owen Coutts

  • Ryan Park

  • Yongwen Xu

  • Nicholas Charriere

  • Samuel Dion-Girardeau

  • James W Thorne

  • Brandon Davis

  • Joseph Boiteau

  • Carlos Moreno

  • Donny Winston

  • James Barclay

  • Thomas Decaux

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

snappass-1.2.0.tar.gz (425.4 kB view details)

Uploaded Source

Built Distribution

snappass-1.2.0-py2-none-any.whl (492.0 kB view details)

Uploaded Python 2

File details

Details for the file snappass-1.2.0.tar.gz.

File metadata

  • Download URL: snappass-1.2.0.tar.gz
  • Upload date:
  • Size: 425.4 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? No

File hashes

Hashes for snappass-1.2.0.tar.gz
Algorithm Hash digest
SHA256 4968838cb6088c2ab60a6889933a652c220b6f1d559b3fa3515d62a0c24f7d28
MD5 f431f138452c5d984d2a3441b6308a30
BLAKE2b-256 2cf43a583f6545d9af2ee7008c44f39d1fe7ce2dcfb2bf0dc1c511da693690dd

See more details on using hashes here.

Provenance

File details

Details for the file snappass-1.2.0-py2-none-any.whl.

File metadata

File hashes

Hashes for snappass-1.2.0-py2-none-any.whl
Algorithm Hash digest
SHA256 ceb8992ae535fd97933eb4ec4958d98a6720ce16630d6f2950f58358a97098bc
MD5 9cdfdc71af855e1861bd9e35b4d7b15d
BLAKE2b-256 bbd605324f64605590c41db3f81143f5707b322b0c3ea85b539ccaf4acf7b767

See more details on using hashes here.

Provenance

Supported by

AWS AWS Cloud computing and Security Sponsor Datadog Datadog Monitoring Fastly Fastly CDN Google Google Download Analytics Microsoft Microsoft PSF Sponsor Pingdom Pingdom Monitoring Sentry Sentry Error logging StatusPage StatusPage Status page