Keybar is a framework, service and client for secure password storage and exchange.

This project aims to implement a safe, open and easy to use password store. Basically it'll be a simple web-application that exposes it's functionality via a simple REST-Api.

It'll be extensible and easily deployable. With that in mind it'll be easy to not just host it almost everywhere a certain Python/Django environment is supported but more importantly to easily host it yourself on your own personal computer.

• Open Source - everyone is invited to review the code!
• TLS 1.2 only with a very limited set of good ciphers
• (optional) client certification verification built-in
• HTTP Signature authentication with RSA schemes
• Data is encrypted with Fernet (symmetric authenticated cryptography)
• Data can be encrypted and stored on the client, encryption keys are always generated by the client to ensure trust.
• Encryption keys are not directly derived from a password, this way both the password an encryption-keys can easily be reset in case of a security-breach
• Planned support for all sorts of keys (fingerprint, yubikey and others)

See keybar.utils.crypto for more configuration details.

If you find anything security-related please open an issue or write an email to [email protected].

The main idea is to create a open-source system to manage those passwords, with many new features like sharing, teams and organization management that others don't have.

A migration or partially-support for other systems like Keepass 1Password, LastPass is planned.

With that in mind, I generally wanted to implement one specific feature on top of LastPass (I use currently), and that was "change all passwords on a regular basis". With more than 200 sites registered with unique passwords it takes way too long to change all relevant passwords on a regular basis.

Since LastPass in particular does not provide any good API and in general is sort of a blackbox (we know they are using PBKDF2 and AES encryption but don't see any code or specifics) the only way was to step up and do it myself. To host the storage system in an environment I trust.

Also, I don't like the idea of unlocking all my passwords with just one "key" - usually some kind of a password. There has to be other ways…

$ Create your virtualenv (recommended, use virtualenvwrapper)
$ mkvirtualenv keybar

$ # Clone repository
$ git clone [email protected]:keybar/keybar.git

$ # Activate Environment and install
$ workon keybar
$ make develop

$ # run tests
$ make test

Create a new file src/keybar/settings.py with the following content:

from keybar.conf.development import *

Edit and adapt this file to your specific environment.

Create an empty new PostgreSQL database (any other supported by Django works too).

$ createdb keybar_dev

$ python manage.py migrate

$ # Create a new super user
$ python manage.py createsuperuser

Other services being used:

• Celery, is being used to run [regular] tasks, e.g for mail output.
• grunt-sass, is being used to compile our scss files and the foundation framework.

To start all of them (including the tls-server):

$ grunt serve

$ make test

• Documentation
• Bug Tracker
• Code