sekura

sekura (Esperanto for "a safe") is a PHP+SQL solution to generate strong passwords for your websites (amazon, eBay, etc.) and store them very safely.

All the cryptographic routines are done on client side (on your PC) with JavaScript, no clear data is ever transmitted or stored on the server, any "man in the middle" attack is useless.

Also, in opposition to all the big commercial websites, your master password is never stored on any server, nor even locally! With sekura algorithm, there is no way to test the validity of your password against the original one, in other words the decrypted data is never tested for correctness.

A hacker can't use brute force to decrypt your data, since all and any password will produce a "valid" result (no error will be thrown, just the data will not be readable by a human... but a machine has no way to know). sekura is open source software and can be audited by anyone.

sekura is written by Nicolas Mougin (mougino@free.fr).

You can download the program at http://mougino.free.fr/freeware/#sekura

License

sekura is provided under the GNU GPL V3 license.

See "gpl.txt" or https://www.gnu.org/licenses/gpl.html

Source code is available at http://mougino.free.fr/code/index.php?p=sekura