Jump to content

Password Safe

From Wikipedia, the free encyclopedia

This is an old revision of this page, as edited by Tramu (talk | contribs) at 19:34, 27 November 2016 (Updated to release 3.41). The present address (URL) is a permanent link to this revision, which may differ significantly from the current revision.

Password Safe
Original author(s)Bruce Schneier
Developer(s)Rony Shapiro, volunteers[1]
Initial releaseJanuary 15, 2002 (2002-01-15)
Stable release
3.41 / November 26, 2016;
7 years ago
 (2016-11-26)
Repository
Written inC++
Operating systemMicrosoft Windows, Android, Linux (beta)
Size12 MB
Available in17 languages
TypePassword manager
LicenseArtistic License 2.0
Websitewww.pwsafe.org

Password Safe is a free and open-source password manager program for use with Microsoft Windows. A beta, command-line, version is also available for Ubuntu (including the Kubuntu and Xubuntu derivatives) and Debian operating systems. A Java-based version is also available on SourceForge. On its page you can find links to unofficial releases running under Android, BlackBerry and other mobile OS.

The port for OS X and iOS, pwSafe (not to be confused with "pwsafe password database", a compatible unix commandline program), is compatible with Password Safe files. It uses iCloud or Dropbox to keep password databases synced between iOS devices and computers.

History

The program was initiated by Bruce Schneier at Counterpane Systems,[2] and is now hosted on SourceForge and developed by a group of volunteers.[3]

Design

After filling in the master password the user has access to all account data entered and saved previously. The data can be organized by categories, searched, and sorted based on references which are easy for the user to remember.[4] The key combination Ctrl+C copies the password of a selected account into the clipboard, Ctrl+U copies user ID. The program can be set to minimize automatically after a period of idle time and clears the clipboard. It is possible to compare and synchronize two different password databases.

Features

Note: All uncited information in this section is sourced from the official Help file included with the application

Password management

Stored passwords can be sectioned into groups and subgroups in a tree structure.

Changes to entries can be tracked, including a history of previous passwords, the creation time, modification time, last access time, and expiration time of each password stored. Text notes can be entered with the password details.

Import and export

The password list can be exported to various file formats including TXT, XML and previous versions of Password Safe. Password Safe also supports importing these files, as well as TXT and CSV Files which were exported from KeePass version 1.x (V1). KeePass version 2.x (V2) allows databases to be exported as a KeePass V1 database, which in turn can be imported to Password Safe.

Password Safe cannot directly import a XML file exported by KeePass V1 or V2, as the fields are too different. However, the Help file provides instructions for processing an exported XML file with one of multiple XSLT files (included with Password Safe) which will produce a Password Safe compatible XML file that can then be imported.

File encryption

Password Safe can encrypt any file using a key derived from a passphrase provided by the user through the command-line interface.

Password generator

The software features a built-in password generator that generates random passwords. The user may also designate parameters for password generation (length, character set, etc.), creating a "Named Password Policy" by which different passwords can be created.

Cryptography

The original Password Safe was built on Bruce Schneier's Blowfish encryption algorithm. Rony Shapiro implemented Twofish encryption along with other improvements to the 3.xx series of Password Safe.[5] The keys are derived using an equivalent of PBKDF2 with SHA-256 and a configurable number of iterations, currently set at 2048.[6][7]

Reception

Reviewers have highlighted the program's simplicity as its best feature.[8]

See also

References

  1. ^ http://sourceforge.net/p/passwordsafe/_members/
  2. ^ "Password Safe Product Review". NMRC. Retrieved 2010-04-29.
  3. ^ "Password Safe | Encryption Download". PCWorld. Retrieved 2010-04-29.
  4. ^ "Password Safe Review: Make Password Retrieval Easier". Brighthub.com. 2009-10-31. Retrieved 2010-04-29.
  5. ^ "WineHQ – Password Safe". WineHQ.org. Retrieved 2013-02-07.
  6. ^ Shapiro, Rony (2013-02-05). "Master Key Generation from Master Password". Retrieved November 29, 2014.
  7. ^ Shapiro, Rony (2013-01-08). "PasswordSafe database format description version 3.29".
  8. ^ "Password Safe review". Software-Today.com. Retrieved 2010-04-29.