Skip to content

CliPassMan v2.0.0

Choose a tag to compare

View all tags
@smartlegionlab smartlegionlab released this 05 Dec 04:18
· 7 commits to master since this release
v2.0.0
87be403
This commit was signed with the committer’s verified signature.
smartlegionlab Alexander Suvorov
GPG key ID: 734508CF2953AF3B
Verified
Learn about vigilant mode.

⚠️ BREAKING CHANGES in v2.0.0

WARNING: This version introduces breaking changes:

  • All passwords generated with v1.x are now INVALID
  • Login parameter removed - now uses only secret phrase and description
  • You must create NEW passwords using your secret phrases
  • Simplified API - only secret phrase required

🎯 Key Features

Deterministic Password Generation

  • Same secret → Same password every time
  • Passwords are mathematical functions of your secret phrase
  • No password database to breach

Security by Design

  • No password storage - generated on-demand
  • Local processing - all operations on your machine
  • Public key verification - proof of secret knowledge without revealing it
  • No internet connection required

User-Friendly Interface

  • Interactive terminal UI with clear menus
  • Password strength customization (4-100 characters)
  • Descriptive service names for easy identification
  • Clear feedback and error messages

⚙️ How It Works

Traditional Password Managers:

  • Store encrypted passwords
  • Require master password decryption
  • Risk of data breaches

clipassman v2.0.0:

  1. You provide: Description + Secret phrase
  2. System generates: Public key (hash of secret)
  3. System stores: Only description, length, and public key
  4. When needed: Enter secret → Password regenerated

Creating a Password:

1. Choose "Add Password"
2. Enter description (e.g., "GitHub Account")
3. Enter secret phrase (never leaves your terminal)
4. Set password length (4-100 characters)
5. Password is generated and displayed

Retrieving a Password:

1. Choose "Get/Delete Password"
2. Select password entry from list
3. Enter your secret phrase
4. Password is regenerated identically

🛡️ Security Features

What Makes It Secure:

  • No Password Storage - Passwords exist only when generated
  • Deterministic Generation - Same inputs → same output, every time
  • Local Processing - No data leaves your computer
  • Verification Without Storage - Public keys verify secret knowledge
  • Open Source - Transparent codebase for security verification

Data Privacy:

  • All data stored locally in ~/.cases.json
  • No internet connectivity required
  • No telemetry or data collection
  • No cloud synchronization

📋 Migration from v1.x

Important Notes:

  • v2.0.0 is NOT backward compatible with v1.x
  • All v1.x passwords are invalid in v2.0.0
  • You must recreate all passwords using your secret phrases

Migration Steps:

  1. Backup any critical passwords from v1.x
  2. Install v2.0.0 fresh
  3. Delete old ~/.cases.json file
  4. Launch clipassman v2.0.0
  5. Recreate all passwords using your secret phrases
  6. Update all service credentials with new passwords

Why the Breaking Changes?

  • Simplified API (removed login parameter)
  • Improved cryptographic algorithms
  • Better security model
  • Cleaner codebase

🐛 Troubleshooting

Common Issues:

"Module not found" errors:

# Reinstall with pip
pip install --force-reinstall clipassman

# Check Python version (requires 3.7+)
python --version

Password generation fails:

  • Ensure secret phrase is entered correctly
  • Check Caps Lock and keyboard layout
  • Verify password length is between 4-100 characters

Getting Help:

  1. Check GitHub Issues
  2. Review the smartpasslib documentation
  3. Create a new issue with details of your problem

Full Changelog: v1.2.0...v2.0.0

Assets 2
Loading