viperadnan/second-password repository overview

⁠Second Password

🔐 A secure, end-to-end encrypted, cloud-synced TOTP authenticator for the web

⁠📝 Overview

Second Password is a web-based two-factor authentication (2FA) solution that implements Time-based One-time Password (TOTP) for secure user authentication. All passwords are end-to-end encrypted and synced to the cloud, meaning your data is encrypted before it leaves your device and can only be decrypted by you. This makes your TOTP secrets accessible from any device while maintaining maximum security.

⁠✨ Key Features

• 🌐 Web-based interface accessible from any device
• 🔐 End-to-end encryption of all sensitive data
• ☁️ Cloud synchronization of encrypted TOTP secrets
• 🔒 Client-side encryption of sensitive data
• 🎨 Clean and intuitive user interface
• 🔄 Automatic TOTP code updates
• 📋 One-click code copying

⁠🔧 Prerequisites

• Python 3.6 or higher
• pip (Python package manager)
• PostgreSQL (optional, SQLite is used by default)

⁠🚀 Installation

1. Clone the repository:

git clone https://github.com/viperadnan-git/second-password.git
cd second-password

1. Install required packages:

pip install -r requirements.txt

1. Set up environment variables (create a .env file or set the variables in your system):

Example .env file:

⁠💻 Development

To run the development server:

python -m src

The application will be available at http://localhost:8000

⁠🌐 Deployment

⁠Using Docker

1. Build the Docker image:

docker build -t second-password .

1. Run the container:

docker run -p 8000:8000 -e SECRET_KEY=your_secret_key_here second-password

⁠Using CapRover

1. Make sure you have a CapRover instance set up
2. Deploy using the provided captain-definition file
3. Configure environment variables in CapRover dashboard

⁠⚙️ Configuration

⁠Database Configuration

The application supports both SQLite and PostgreSQL:

• SQLite (default): No configuration needed, will create user.db in root directory
• PostgreSQL: Set DATABASE_URL environment variable:

DATABASE_URL=postgresql://user:password@localhost:5432/dbname

⁠Security Configuration

• Set a strong SECRET_KEY in environment variables
• Use HTTPS in production
• Keep your database credentials secure

⁠🔒 Security

• TOTP secrets are encrypted using AES before storage
• Passwords are hashed using bcrypt
• Client-side encryption of sensitive data
• Session-based authentication

⁠🛠️ Tech Stack

• Backend: Flask, Python
• Database: PostgreSQL/SQLite with Peewee ORM
• Frontend: Bootstrap 5, JavaScript
• Authentication: Flask-Login
• Encryption: CryptoJS (client-side), bcrypt (server-side)
• TOTP: otplib

⁠📄 License

This project is licensed under the MIT License - see the LICENSE⁠ file for details.

⁠🤝 Contributing

Contributions are welcome! Please feel free to submit a Pull Request.

1. Fork the repository
2. Create your feature branch (git checkout -b feature/AmazingFeature)
3. Commit your changes (git commit -m 'Add some AmazingFeature')
4. Push to the branch (git push origin feature/AmazingFeature)
5. Open a Pull Request

⁠📧 Contact

Adnan - @viperadn⁠ - [email protected]⁠

Project Link: https://github.com/viperadnan-git/second-password⁠

⁠🙏 Acknowledgments

• Flask⁠
• Peewee⁠
• otplib⁠
• CryptoJS⁠