SNAPPASS_REDIS_DB: is the database that you want to use on this redis server. REDIS_PORT: is the port redis is serving on, defaults to 6379 REDIS_HOST: this should be set by Redis, but you can override it if you want. URL_PREFIX: useful when running snappass behind a reverse proxy like nginx. STATIC_URL: this should be the location of your static assets. See the Flask Documentation for more information. See the Flask Documentation for more information.ĭEBUG: to run Flask web server in debug mode. SECRET_KEY: unique key that's used to sign key. Then, you can configure the following via environment variables.
Start by ensuring that Redis is up and running. This means that even if someone has access to the Redis store, the passwords are still safe. It is rather sent as part of the password link. Passwords are encrypted using Fernet symmetric encryption, from the cryptography library.Ī random unique key is generated for each password, and is never stored
Trouble of writing it yourself, because maybe you are busy and have other things Not only is someone looking in her email, they are clicking on links.Īnyway, this took us very little time to write, but we figure we'd save you the Also, Jane can't get the password, but now Jane knows that If the NSA gets a hold of the link, and they look at the password. Jane gets a link to the password and never looks at it, the password goes away. It's not that complicated, it does one thing. You could write it down, but you can't find a pen, and there's way too manyĬharacters because your security person, Paul, is paranoid. You could send it to her over chat, but chances are Jane logs all her messagesīecause she uses Google Hangouts Chat, and Google Hangouts Chat might log everything. You could email it to her, but then it's in her email, which might be backed up,Īnd probably is in some storage device controlled by the NSA. You want to give it to your coworker, Jane. This is a web app that lets you share passwords securely.
0 kommentar(er)
