https://github.com/dhui/passhash

Go library providing simple and secure password management
https://github.com/dhui/passhash

audit-log audit-logs bcrypt go golang hash library passhash password password-hash password-manager password-policies password-policy password-store passwords pbkdf2 scrypt secure-by-default security

Last synced: 5 months ago
JSON representation

Go library providing simple and secure password management

• Host: GitHub
• URL: https://github.com/dhui/passhash
• Owner: dhui
• License: apache-2.0
• Created: 2017-08-06T00:30:25.000Z (about 8 years ago)
• Default Branch: master
• Last Pushed: 2025-04-18T19:04:10.000Z (6 months ago)
• Last Synced: 2025-05-07T23:49:12.729Z (5 months ago)
• Topics: audit-log, audit-logs, bcrypt, go, golang, hash, library, passhash, password, password-hash, password-manager, password-policies, password-policy, password-store, passwords, pbkdf2, scrypt, secure-by-default, security
• Language: Go
• Homepage:
• Size: 73.2 KB
• Stars: 9
• Watchers: 2
• Forks: 5
• Open Issues: 10
• Metadata Files:
  • Readme: README.md
  • License: LICENSE
  • Audit: audit_logger.go
  • Security: SECURITY.md

Awesome Lists containing this project

README

          
# Passhash ![GitHub Workflow Status (branch)](https://img.shields.io/github/actions/workflow/status/dhui/passhash/go.yml?branch=master) [![Code Coverage](https://img.shields.io/codecov/c/github/dhui/passhash.svg)](https://codecov.io/gh/dhui/passhash) [![GoDoc](https://godoc.org/github.com/dhui/passhash?status.svg)](https://godoc.org/github.com/dhui/passhash) [![Go Report Card](https://goreportcard.com/badge/github.com/dhui/passhash)](https://goreportcard.com/report/github.com/dhui/passhash) [![GitHub Release](https://img.shields.io/github/release/dhui/passhash/all.svg)](https://github.com/dhui/passhash/releases) ![Supported Go versions](https://img.shields.io/badge/Go-1.23%2C%201.24-lightgrey.svg) [![HackerOne](https://img.shields.io/badge/HackerOne-ok-brightgreen.svg)](https://hackerone.com/passhash)

passhash addresses the dismal state of password management in Go by offering easy-to-use APIs to manage credentials (e.g. password hashes)

**Note: The exposed surfaces (e.g. interfaces, structs, and struct fields) are in flux until v1.0.0 is released**

## Features

* Simple, easy to use API

* Tunable work factors

* Auto-upgrading KDFs and work factors

* Password usage audit log

* Password policies

## Available Password Policies

Password Policy | Repo

----------------|-----

AtLeastNRunes | Included

NotCommonPasswordNaive | Included

## Available CredentialStores

Credential Store | Repo

-----------------|-----

DummyCredentialStore | Included

StringCredentialStore | Included (in examples)

StringCredentialPepperedStore | Included (in examples)

## Available AuditLoggers

Audit Logger | Repo

-------------|-----

DummyAuditLogger | Included

MemoryAuditLogger | Included