nelkor / passcryptum

Cryptographic password manager
https://passcryptum.com
MIT License
71 stars 4 forks source link

✨ PIN code #145

Closed nelkor closed 1 year ago

nelkor commented 1 year ago

Sometimes we need to get a password when we are in a public place. Entering your master password can be reckless because there is a risk of revealing it to strangers.

The solution is to be able to save your master password encrypted on your device. In this case, the key to decryption will be in the PIN code — an arbitrary string known to you. The PIN doesn't have to be complex because it doesn't carry the entropy to generate passwords.

We ourselves set an arbitrary PIN code after we have entered the master password. Then, in a public place, we enter a PIN code instead of a master password and get access to generating our passwords.

By setting a PIN code, we take on a certain risk. If our device with the PIN code set falls into the hands of an attacker, he will be able to try to guess the PIN code from the master password by brute force. Since the PIN code is usually simple, in this case your master password will be revealed.

However, the PIN code can be set or removed. So we can control this risk. It is more risky for someone to enter the master password in public places, and for someone it is more risky to save sensitive information to the device. It would be great to have a tool to manage these possibilities.