gPass Chrome 插件, crx 扩展下载
扩展ID: pdmhjekonpgonlpdpgehaoekfpbmligk
gPass : global password managergPass : global Password for Firefox and Chrome Introduction Everyday we have a lot of passwords to manage corresponding to a lot of accounts we use. It's hard to remain all of these, moreover if we don't use it often. So, what most people do is to generate only a subset of passwords easy to remain. This implies two common errors : * Password are not very strong * We use them for multiple accounts The best way to avoid these errors is to have a unique strong password for each account. gPass helps to reach this goal : you keep a subset of passwords (called masterkey) and for each login/masterkey tuple you chose, gPass returns the real password by querying a password server. To have a high level of security, all information is stored encrypted (server side). Nothing is stored on client. The decryption is done on the fly when it's needed and only with user input. So, a hacker can get your password database, it will not be able to see any information (except if it brute force or leak your masterkey) ! So it's important to choose a strong masterkey ! This addon is like [last pass](https://lastpass.com/) one, but I wanted it to be open source and self hostable (be careful on server down !). Moreover, with gPass, you can have multiple master keys ! Usage The first thing to do is to populate your database (from your/a password server) with website address/login/password/master key values. You can use "*" character to access to all subdomains of a specific website (ie *.google.com). If you want to make a strong password, there is a password generator. After that, configure your addon in "tools -> addons -> gPass -> preferences" in Firefox or "More tools -> extensions -> gPass -> options" in Chrome to point to your password server (+ username). **Don't forget to enable addon within private mode**. Be careful, login and password are case sensitive ! When you're in a login form and you want to use gPass, type your login (case sensitive !) and fill "@@masterkey" in password field (only if gPass icon is green !). Then submit and password will automatically be replaced by the one in the database (after addon decrypt it). **You can also type "@_masterkey" to only replace your password without automatic submit. This allows to support more websites.** Another option is to enter your credentials in the new popup menu by clicking on gPass icon. If it's possible, gPass will auto fill password field, if not result password is stored into your clipboard. **Popup path is a safest method as website page will never see your masterkey.** ** Warning ** : Sometimes, addon could make some websites unusable, especially for login form. In this case, you can deactivate it for only one website by clicking right on gPass icon and "disable or enable gPass for this website". It's a local configuration, so it must be done for each browser. Technical details The two main columns in database are "login" and "password". login is compounded by "domain;login", salted and encrypted with AES 256-CBC The real key that encrypts these fields is PBKDF2 (hmac-sha256, masterkey, password_server_url, 1000, 256), IV is PBKDF2 (hmac-sha256, password_server_url, masterkey, 1000, 256) PBKDF2 level can be changed by user. Server side is written in PHP (with SQLite3 for database component). Server To host a password server, you need a webserver. Just copy server files in a directory read/write for web server user (www-data). A sample apache2 configuration file is available in resources. Since v0.8 and the use of Crypto API, **it's manadatory to have an HTTPS access (valid SSL/TLS certificate) to the server**. Without that, the decryption will fails. Configuration parameters are in conf.php A demonstration server is available [here](https://gpass-demo.soutade.fr). It's the default server configuration for fresh installed addon (user demo). **Warning** The master key derivation is partially based on account URL. So it's linked to your current server information. You can't move databases from servers with different URLs, you need to export them and import it again. **Server side is available [here](http://indefero.soutade.fr/p/gpass/downloads)** Version 0.6 introduces shadow logins. It's a protection again illegal database dump and purge but requires twice computation. Database update is transparent. The principle is to generate a random value (shadow login) that must be encrypted with the masterkey to get an access token. This access token allows to get the true (but encrypted) login/password couple. It's a kind of challenge : if I can encrypt the shadow login, I know the masterkey ! For security reason, the derivation of masterkey for deciphering passwords is different than for encrypting shadow logins (it uses its own salt). It's enabled by default. Client Just install the package. You can have debug information by setting DEBUG in main.js. Command line interface A command line interface is also available with the following usage : Usage: ./gpass_cli [-f config_file] [-p server_port] [-c CA_certificate_path] [-l PBKDF2_level] [-s gpass_server] [-v] -d domain -u username You can save recurrent parameters into a configuration file. Default config file is found at $HOME/.local/share/gpass/gpass.ini The dependencies are libcurl and OpenSSL (-dev packages : ie _libcurl4-openssl-dev_ and _libssl-dev_) A sample configuration file is available _gpass.ini.sample_ License All the code is licensed under GPL v3. Source code is available [here](http://indefero.soutade.fr/p/gpass). Privacy Policy Privacy Policy can be found at http://indefero.soutade.fr/p/gpass/source/tree/master/PrivacyPolicy.md Mailing list You can subscribe to the announce list @ https://pannous.soutade.fr/lists/gpass
名称 | gPass |
插件标识 | pdmhjekonpgonlpdpgehaoekfpbmligk |
平台 | Chrome |
评分 | 0 |
评分人数 | 4 |
插件主页 | |
作者 | soutade |
版本号 | 1.0 |
大小 | 66.75 KB |
官网下载次数 | 212 |
分类 | 查看更多 无障碍辅助 分类下的扩展插件 |
下载地址 | |
更新时间 | 2020-10-15 00:00:00 |
CRX扩展文件安装方法
打开Chrome浏览器的扩展程序: 地址栏直接输入:chrome://extensions/ 即可进入,将右上角的【开发者模式】开启,重启chrome(重要操作),再次打开扩展程序管理界面,把下载的crx直接拖动进去即可完成安装,注意请更新最新版本的chrome.
打开Chrome浏览器的扩展程序: 地址栏直接输入:chrome://extensions/ 即可进入,将右上角的【开发者模式】开启,重启chrome(重要操作),再次打开扩展程序管理界面,把下载的crx直接拖动进去即可完成安装,注意请更新最新版本的chrome.
回复
强烈推荐
相关推荐
大家在找这些插件
- Slax Reader
- hac
- 垂直标签页
- Chrome 垂直标签页扩展
- songsterr
- visdeo
- youtube ai subtitle and web translator
- rsshub radar
- web media radar
- neo vision
- bbc iplayer
- powerpoint
- onenote web
- youtube中文配音
- idmç ´è§£ç
- easy to rss
- a cute browser pet
- global speed_
- ptpp
- gnome shell extension
- pubg
- 右键预览图片
- Easy to RSS
- Youtube AI Subtitle and Web Translator
- Global Speed_
- 万能视频下载工具
- bbc IPLAYER
- BBC IPLAYER
- video DOWNLOAD
- augmented-steam
- font-weight
- ✒font-weight:800✒font-weight:800
- ✒font-weight:800
- 电子书全网搜
- Songsterr
- pdf????????????ppt
- ai翻译
- OKX
- 英文学习
- 拖放自由
- 媒介
- 云彩
- 小云
- OneNote Web
- 坐标
- IDMç ´è§£ç
- A Cute Browser Pet
- PowerPoint
- 微乐麻将
- palinsestotv.c
- ligopartners.c
- luccascovo.c
- commercialera.c
- magyargifts.c
- salesforce login
- 在线听
- Youtube中文配音
- 中文配音
- 网络助手
- Free Download Manager edge
- uc浏览器
- uc
- filcr
- biliplus
- hpoi
- flash copilot
- FilCR
- m3u9
- pornbot
- pornhubbot
- boodigo
- BiliPlus
- 雷电下单助手
- 雷电
- idgn
- 股票基金管家
- switch Omega
- word highlight
- setuovon
- ghler
- ligopartners.com
- 视频号
- ug
- Supercopy
- insgram
- acg
- 视频会员
- HPOI
- avtar
- acr
- Kimi
- antibot
- chandler
- 1passward
- Flash Copilot
- 黑暗模式-护眼
- 蓉城
- 税号