zeruniverse / Password-Manager

An online keepass-like tool to manage password. client-side AES encryption!
Other
170 stars 44 forks source link

what is the password #262

Closed kingwenw closed 3 years ago

kingwenw commented 3 years ago

hello ,I'm a big fan of yours. I really like this password management system. But I had a problem with deployment. The password entered after the deployment is complete is incorrect. What should I do.

The version I deployed was 11.01. Looking forward to your guidance. The screenshot of encountered problems is as follows

image

zeruniverse commented 3 years ago

Please follow the installation guide here: https://github.com/zeruniverse/Password-Manager/wiki/Installation

from first look of your screenshot, you clearly didn’t do two things:

  1. You did not enable HTTPS. HTTPS is required even for 127.0.0.1
  2. you should copy whatever in src folder to the server root dir. NOT the entire repo! I.e, the page in your screenshot should be accessed with URL https://127.0.0.1
kingwenw commented 3 years ago

firstly: I really appreciate your guidance Follow your instructions, I have now used HTTPS, and copy whatever in SRC folder to the server root dir . However, the system still prompts me that the password is incorrect. What should I do Looking forward to your reply image

zeruniverse commented 3 years ago

Hi

I see hostdomain mismatch error. Did you edit config.php as described inside installation guide? In your case, $HOSTDOMAIN should be https://127.0.0.1/

please do not skip any step in the installation guide.

kingwenw commented 3 years ago

Thank you very much. I have successfully deployed. I like this system very much.
I found that the database table was empty when I entered the database file.
So I created a new user using the "signup.php" interface The new user successfully logs in to the system. This is my screenshot image

     But I have a new problem
            1.What should I do if I forget my password
            2.I would like to have an administrator user who can see other users
     Could you give me some guidance
zeruniverse commented 3 years ago

The password manager is designed so that you can only decrypt things with your password because if you have a way to recover information without password, a hacker can as well. That means:

  1. If you forget your password, you will lose everything forever. There’s no way for you to decrypt the stored information without a password. If you are afraid of losing password, write it down on a paper and put it somewhere in your house

  2. It is impossible. User’s password will only be known by browser and processed by browser, and the password will not go to the server. That said, you can’t know another user’s password, and according to my answer to previous question, you can’t decrypt their information.

Again, the password manager is designed to make your password safe from attackers/server admins/governments/polices etc. so it is designed in a way that you can ONLY decrypt info with correct password

On Mon, Aug 9, 2021 at 8:25 PM kingwenw @.***> wrote:

Thank you very much. I have successfully deployed. I like this system very much. I found that the database table was empty when I entered the database file. So I created a new user using the "signup.php" interface The new user successfully logs in to the system. This is my screenshot [image: image] https://user-images.githubusercontent.com/48201226/128803486-28694fee-7219-4428-9a46-f74d27d8cb91.png

 But I have a new problem
        1.What should I do if I forget my password
        2.I would like to have an administrator user who can see other users
 Could you give me some guidance

— You are receiving this because you commented.

Reply to this email directly, view it on GitHub https://github.com/zeruniverse/Password-Manager/issues/262#issuecomment-895699715, or unsubscribe https://github.com/notifications/unsubscribe-auth/ABDO6NDEDOGZD4KMD25RDFTT4CL3ZANCNFSM5B3CKJTA . Triage notifications on the go with GitHub Mobile for iOS https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675 or Android https://play.google.com/store/apps/details?id=com.github.android&utm_campaign=notification-email .

zeruniverse commented 3 years ago

@kingwenw if you are satisfied with my answer, please close the bug