Hardware credential manager is secure replacement of stickers on monitor with login and passwords.
Separate device will store your credentials and type then into login forms.
Keep your creds in secret.
Approximate list.
| Title | Aproximate Price | URL |
|---|---|---|
| nRF52840 Pro Micro | 4$ | Aliexpress |
| SSD1306 I2C OLED display 128x64 0.96 inch | 1.2$ | Aliexpress |
| Rotary Encoder with knob | 1$ | Aliexpress |
| 4 x Button | less 1$ | Aliexpress |
| 4 x 10 kOhm resistor | 0.1$ | Aliexpress |
| 4 x 1 kOhm resistor | 0.1$ | Aliexpress |
| 5 x 100uF conductor | 0.05$ | Aliexpress |
| 1 x 100nF conductor | 0.01$ | Aliexpress |
| Type-C cable | 1$ | Aliexpress |
| Breadboard or Custom PCB | ? | |
| Total | 8.06$ + ? |
Note: next list is under investigation after decision to change board from Arduino based to nRF52
| Feature | Library | URL |
|---|---|---|
| HID Keyboard | tinyUSB | https://github.com/hathach/tinyusb/ |
| OLED display | Adafruit_SSD1306 | |
| CLI | SimpleCLI | |
| Rotary Encoder | RotaryEncoder | |
| Settings Storage | arduino-NVM | |
| Creds Storage | arduino-NVM |
- All original code of PasswordPump has been removed from the project. Code base has been developed from scratch.
- AES128 has been replaced with AES256.
- Code related to authentication and encrypted storage has been covered by unit tests (AUnit has been used).
- Unfortunatelly sketch is too big for Arduino Pro Micro and need to decide how continue the project
- Porting code to nRF52840 Pro Micro board is starting
- Changing project license is planned
See design
I hope that available and clear design can gain the trust of users.
Credential manager is device storing sensitive information and it's used for security purposes.
Customers may trust proprietary solutions due to manufacturer reputation even if device internals is unknown.
Small project should be opened as possible to become acceptable alternative.
... https://github.com/seawarrior181/PasswordPump
I'd like to thank Dan Murphy for PasswordPump. It's cool idea and device. I'm appreciate how many features has been implemented in orignal sketch.
PasswordPump usability is too complex by my opinion. I'm sure that it's possible to make device more simple and usable.
PasswordPumpII project is exist but it's based on board which price is in 5-7 times higher then for Arduino Pro Micro. Such cool device as hardware credential manager should be as cheaper as possible to be more accecible.
GitHub: https://github.com/seawarrior181/PasswordPump
Author: Dan Murphy aka
An ATMega32u4 USB based credentials manager. See www.5volts.org for more information.
Project is under active development. Please don't use it until first stable release.
The PasswordWand is not secure from keylogging attacks (https://en.wikipedia.org/wiki/Keystroke_logging).
Under no circumstances and under no legal theory, whether in tort (including negligence), contract, or otherwise, shall the creator of this device and software be liable to any person for any direct, indirect, special, incidental, or consequential damages of any character arising as a result of the use of the PasswordWand including, without limitation, damages for loss of goodwill, work stoppage, computer failure or malfunction, personal injury, death or any and all other damages or losses.
This work is licensed under a Creative Commons Attribution-NonCommercial-ShareAlike 4.0 International License.
This program and device are distributed in the hope that they will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.