{"id":28473158,"url":"https://github.com/rclone/passwordcheck","last_synced_at":"2025-07-01T14:11:08.969Z","repository":{"id":57571750,"uuid":"314294153","full_name":"rclone/passwordcheck","owner":"rclone","description":"Check rclone config files for insecure passwords","archived":false,"fork":false,"pushed_at":"2020-11-22T11:56:28.000Z","size":35,"stargazers_count":24,"open_issues_count":0,"forks_count":8,"subscribers_count":6,"default_branch":"main","last_synced_at":"2025-06-01T20:00:55.363Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/rclone.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"COPYING","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2020-11-19T15:46:30.000Z","updated_at":"2025-03-31T03:45:03.000Z","dependencies_parsed_at":"2022-09-19T03:00:22.804Z","dependency_job_id":null,"html_url":"https://github.com/rclone/passwordcheck","commit_stats":null,"previous_names":[],"tags_count":3,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rclone%2Fpasswordcheck","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rclone%2Fpasswordcheck/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rclone%2Fpasswordcheck/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rclone%2Fpasswordcheck/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/rclone","download_url":"https://codeload.github.com/rclone/passwordcheck/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rclone%2Fpasswordcheck/sbom","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":258560115,"owners_count":22720464,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2025-06-07T12:06:14.440Z","updated_at":"2025-07-01T14:11:08.948Z","avatar_url":"https://github.com/rclone.png","language":"Go","funding_links":[],"categories":[],"sub_categories":[],"readme":"# passwordcheck for rclone config files\n\nIn https://github.com/rclone/rclone/issues/4783 a security issue was\nfound which meant that passwords generated by \"rclone config\" might be\ninsecure.\n\nThis program checks your rclone config file for any of those\npasswords.\n\n## Installation\n\nDownload the relevant zip file for your OS and architecture from here:\n\n- https://github.com/rclone/passwordcheck/releases\n\nUnpack the zip archive - use `unzip archive.zip` on Linux/macOS - use\nExplorer on Windows.\n\nOpen a terminal and change directory to the place you unpacked the zip\nfile.\n\nFirst find where your rclone config file is.\n\n```\n rclone config file\nConfiguration file is stored at:\n/home/USER/.rclone.conf\n```\n\nNow run the utility with this as an argument\n\n```\n./passwordcheck /home/USER/.rclone.conf\n```\n\nNote that it may take 10 minutes or more to run. At the end it will\nprint a report showing any insecure passwords found.\n\nFor example:\n\n```\n$ ./passwordcheck ~/.rclone.conf\n2020/11/19 14:01:49 found 269 remote definitions\n2020/11/19 14:01:49 found 54 passwords generated by rclone config which need checking\n2020/11/19 14:01:49 ignored 11 passwords not generated by rclone config\n2020/11/19 14:01:49 ignored 14 passwords less than 64 bits\n2020/11/19 14:01:49 Looking through 39103309 seeds from seed 1566691200 generated at 2019-08-25 01:00:00 to seed 1605794509 generated at 2020-11-19 14:01:49 for 3 passwords of length 64 bits\n2020/11/19 14:03:38 FOUND match for remote test-remote-1: obscured password \"fJKeinHaUgkd_4pO0J70tUMUkvoxoPES5p7-\" at seed 1605788442 generated at 2020-11-19 12:20:42\n2020/11/19 14:03:38 That took 1m48.992723504s for 358769.904475 seeds/s\n2020/11/19 14:03:38 Looking through 39103309 seeds from seed 1566691200 generated at 2019-08-25 01:00:00 to seed 1605794509 generated at 2020-11-19 14:01:49 for 1 passwords of length 80 bits\n2020/11/19 14:05:26 That took 1m48.506673926s for 360376.994199 seeds/s\n2020/11/19 14:05:26 Looking through 39103309 seeds from seed 1566691200 generated at 2019-08-25 01:00:00 to seed 1605794509 generated at 2020-11-19 14:01:49 for 3 passwords of length 88 bits\n2020/11/19 14:07:15 That took 1m48.705563639s for 359717.641775 seeds/s\n2020/11/19 14:07:15 Looking through 39103309 seeds from seed 1566691200 generated at 2019-08-25 01:00:00 to seed 1605794509 generated at 2020-11-19 14:01:49 for 5 passwords of length 96 bits\n2020/11/19 14:09:04 That took 1m48.960218306s for 358876.933324 seeds/s\n2020/11/19 14:09:04 Looking through 39103309 seeds from seed 1566691200 generated at 2019-08-25 01:00:00 to seed 1605794509 generated at 2020-11-19 14:01:49 for 3 passwords of length 104 bits\n2020/11/19 14:10:52 That took 1m48.214117167s for 361351.273047 seeds/s\n2020/11/19 14:10:52 Looking through 39103309 seeds from seed 1566691200 generated at 2019-08-25 01:00:00 to seed 1605794509 generated at 2020-11-19 14:01:49 for 5 passwords of length 112 bits\n2020/11/19 14:12:40 That took 1m48.342694733s for 360922.433177 seeds/s\n2020/11/19 14:12:40 Looking through 39103309 seeds from seed 1566691200 generated at 2019-08-25 01:00:00 to seed 1605794509 generated at 2020-11-19 14:01:49 for 21 passwords of length 128 bits\n2020/11/19 14:14:31 FOUND match for remote test-remote-2: obscured password \"r-zxEh10ufF9r48najyPn9UrmECuMhWTkIsEubDKtZ3fehFHMwY\" at seed 1605793125 generated at 2020-11-19 13:38:45\n2020/11/19 14:14:31 FOUND match for remote test-remote-3: obscured password \"px0py_poF8Jzis0rxNGf2OvtVZPnmwUruqI1o3trhE1I8fcR3To\" at seed 1605793170 generated at 2020-11-19 13:39:30\n2020/11/19 14:14:31 That took 1m50.446349362s for 354047.999104 seeds/s\n2020/11/19 14:14:31 Looking through 39103309 seeds from seed 1566691200 generated at 2019-08-25 01:00:00 to seed 1605794509 generated at 2020-11-19 14:01:49 for 1 passwords of length 144 bits\n2020/11/19 14:16:19 That took 1m47.826663577s for 362649.716710 seeds/s\n2020/11/19 14:16:19 Looking through 39103309 seeds from seed 1566691200 generated at 2019-08-25 01:00:00 to seed 1605794509 generated at 2020-11-19 14:01:49 for 12 passwords of length 1024 bits\n2020/11/19 14:18:10 That took 1m51.525192167s for 350623.103536 seeds/s\n\n\n*** 3 Insecure passwords found\nremote test-remote-1: \"fJKeinHaUgkd_4pO0J70tUMUkvoxoPES5p7-\"\nremote test-remote-2: \"r-zxEh10ufF9r48najyPn9UrmECuMhWTkIsEubDKtZ3fehFHMwY\"\nremote test-remote-3: \"px0py_poF8Jzis0rxNGf2OvtVZPnmwUruqI1o3trhE1I8fcR3To\"\n```\n\n**NB** don't make public any of the obscured passwords that rclone\nprints - these can easily be reversed into the actual password. The\nones show here are for demonstration purposes.\n\nTo see more detail what is happening run with the `-verbose` flag.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Frclone%2Fpasswordcheck","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Frclone%2Fpasswordcheck","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Frclone%2Fpasswordcheck/lists"}