Should you keep a list of usernames and passwords

SHOULD YOU KEEP A LIST OF USERNAMES AND PASSWORDS HOW TO

SHOULD YOU KEEP A LIST OF USERNAMES AND PASSWORDS HOW TO

Of course, anyone who was targeting your script would just be able to look at the source and figure out how to unencrypt/unobfuscate the password, but you'd at least prevent some application vacuuming up all passwords in the vault and getting yours as well. To obscure that vulnerability a bit you could encrypt/obfuscate the password in some manner before storing it on the keyring. Items are encrypted with the user's operating system credentials, thus other applications running in your user account would be able to access the password. Password = keyring.get_password(service_id, username) Username = keyring.get_password(service_id, MAGIC_USERNAME_KEY) # after all, the keyring is just a key-value store

Later to get your info from the keyring # again, abusing `get_password` to get the username. t_password(service_id, MAGIC_USERNAME_KEY, username) # we're just using some known magic string in the username field # optionally, abuse `set_password` to save username onto keyring t_password(service_id, username, 'password') MAGIC_USERNAME_KEY = 'im_the_magic_username_key' Usage if you want to store the username on the keyring: import keyring Password = keyring.get_password(service_id, 'dustin') # retrieve password t_password(service_id, 'dustin', 'my secret password') # the service is just a namespace for your app The python keyring library integrates with the CryptProtectData API on Windows (along with relevant API's on Mac and Linux) which encrypts data with the user's logon credentials.

Should you keep a list of usernames and passwords