Skip to content

ferfebles/indiko

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

13 Commits
 
 
 
 
 
 

Repository files navigation

the amnesic pwd manager

why

can't remember my passwords, nor want a pwd manager account

how

open indiko, enter your master pwd, then your account [reminder] and press the current year button

security

  • No dependencies on external libraries
  • Just a single HTML file with some easily auditable javascript
  • Uses PBKDF2 from your browser crypto API (remember, no external dependencies) with 100.000 iterations
  • It derives a 192 bits pwd (32 chars in Base64) from your master password with your 'account + year' as salt

but

  • It says "[Web Crypto|Clipboard] not supported"

    Try Chrome

  • With Chrome it still says "Clipboard not supported"

    You're probably using iOS, where all browsers use Safari rendering engine. Sorry but you have to wait for Safari "navigator.clipboard" support

  • But I want to use {browser}?

    It needs support for crypto [and copy] APIs. Try the latest version of your preferred browser

  • I don't like the page!

    I favored simplicity and auditability over styling and dependencies

  • Can my master pwd be smaller than 16 chars?

    No

  • Do I need to remember the year I selected for each account?

    Yes. Or change all your passwords on new year's day and use always the current year

  • My password expires every 90 days!

    Start with 'year', then use the quarter 'Q1-Q4' buttons

  • I need the password from five years ago!

    Press the previous year four times

  • My service doesn't allow 32 char passwords!

    Use another service

  • I don't trust your website!

    Download the HTML file and open it in an isolated computer

  • There are better PBKDF2 alternatives!

    Not in the browsers crypto API to my knowledge and I don't want to rely on external dependencies

  • The fulfilPWDRequirements function reduces the bit length of the pwd!

    Yes, it ALWAYS changes the first four chars to "lower+upper+digit+simbol", and it reduces from (64^32) to (64^28)x(26^2)x10x32 different passwords, 80934920751979755332050202371375703759864659890321489920 in total

  • The fulfilPWDRequirements can be improved!

    Yes, but it's simpler like this. If you are really worried about the bit reduction it's MUCH easier to change the 192 bits to 256 in the copyPBKDF2 function

  • There is a flaw in your implementation!

    Please, open a merge request

  • Why this name?

    See the wiktionary: Indiko

Releases

No releases published

Packages

No packages published

Languages