Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.

Awesome Lists | Featured Topics | Projects

https://github.com/cknoll/textprotect

some python code and some dialog fields to ease access to an password encrypted textfile
https://github.com/cknoll/textprotect

Last synced: about 20 hours ago
JSON representation

some python code and some dialog fields to ease access to an password encrypted textfile

Awesome Lists containing this project

README 

        
# textprotect



The program `textprotect` aims to be *very simple password manager*.

It allows to easily create, read and edit a plain text file

which is encrypted before it is written to the physical memory.

The text file is decrypted before shown to the user in the favorite

text editor (currently `kate` is hard coded)



It combines simplicity (plain text, standard editor) and security (`gpg`).



The target audience are people which are only little concerned with

cyber-security and might not yet use any password-manager.

This program offers a simple, understandable way to store sensible

information like passwords, PINs etc. comparatively securely on hard-drives.



Long story short: I created this project for my parents.



## Background

`textprotect` consists of a single python script which uses kdialog to interact with the user.

The encrypted data is stored in `~/textprotect/data.txt.gpg`.

The decrypted data is temporarily stored in `/dev/shm/xxx-textprotect-tmp.txt`, where `xxx`

is some random string. Note that this file lives only in memory but not on the hard drive.

It is immediately deleted after the text editor has been closed.



## Installation (provisional guide)



- run `sudo apt install python3-gnupg kde-baseapps-bin`

- copy the script `textprotect` in your path



## Usage

### First usage



- Notice that the author does not provide any warranty

- Run `textprotect` from the command line.

- Type in twice the password which you want to use for protecting the your text file.

- After the editor has opened type in or paste your secret text.

- Close the editor.



### Normal usage

- Run `textprotect` from the command line.

- Type in the password which you want to use for protecting the your text file.

- After the editor has opened type in or paste your secret text.

- Close the editor.



## Usage Recommendations

- Regularly backup the file `~/textprotect/data.txt.gpg` on a different device.

- There is no password-recovery function: memorize the textprotect-password very well

or better write it down in some trusted place.

- Note that encryption-algorithms are not unbreakable.

The goal of encryption is to increase the necessary effort to break it beyond the benefit

of breaking it. Long keys/passwords greatly help to increase the security.

- For the interested: play around with that: 



### Bad ideas to store passwords (in general)



- Sticky note next next to the display

- Crumpled piece of paper hidden in some creative place

    - Danger of been thrown away during some cleanup and of never to be found again

- Only memorize them

    - Works only for few passwords which are frequently used

    - Might cause stress due to fear of forgetting

    - Encourages to choose too simple passwords and/or reuse of passwords

- Unencrypted on your hard drive

    - Vulnerable due to malware

- Unencrypted on some cloud storage (dropbox)

    - Vulnerable due to abuse by provider



### Good ideas to handle and store passwords



- Encrypted on your computer

- Encrypted on some trusted cloud storage

    - (-> Solution to the backup problem)

- Master-Password: neat piece of paper at secure place (e.g. alongside other important documents)



## Issues (PRs welcome)



- make a backup of the encrypted-files, to prevent complete data loss in case of saving an empty file

- auto-detect the language, refactor the language dependent message-strings to a separate module

- make it installable via pip



## License

This project is licensed under GPLv3. See [LICENSE](LICENSE)