juicetin/pass-audit

Tool to measure password strength for the 'pass' tool - https://www.passwordstore.org/

pass-audit's Issues

Integration with pass-tomb

At the moment, the implementation relies on being able to get the list of files from the $HOME/.password-store directory directly, and so is incompatible with pass-tomb.

Initial 'opinionated' checks for password strength

Implement basic checks.

• 10+ characters
• at least upper/lower case characters, numbers

Simply shows when a password is deemed insecure based on a particular set of rules, without action needed from the user to do anything/fix the insecure password yet.

Integration with pass-update

Add a flag to allow calling the functionality from the pass-update addon to start prompting the user to perform a password change for each password that has been deemed insecure.

Allow user-defined strength checks

Allow user to define their own rules for 'strength':

• character length
• special characters
• upper/lower case
• etc.

Perhaps an option should also be provided to allow regex checks as an alternative/in addition to this. TBD.

Check for duplicate passwords across services

Check for duplicates across the set of all passwords stored in pass (the sha512 hashes of passwords will be taken before doing comparisons with other passwords).

This should probably be provided as a flag/option as opposed to being run by default.