-
Login screen
-
Registration screen
-
Main landing page
-
Graph view of credentials
-
Chrome extension
-
Extension auto fill view
For this hack n roll we decided to tackle an increasingly prevalent problem many of us face today: account security, with our password manager.
The idea for this came when one day, one of our friend stumbled upon a data breach of leaked accounts just pasted in full plaintext. Fortunately for him, that account was using a different login credentials from the rest of his accounts. Imagine if his main google or apple id account was compromised, it would lead to cascading account breaches as this main account could be used to authenticate his other accounts via the abuse of “forget password” functionality. And worst of all, he would be none the wise unless he was up to date on the latest data breaches and could have been susceptible to potential scam or ransomware.
This is why we decided to create a password manager to tackle this issue.
One of the cool things we learnt for this hackerthon was using Neo4j. We primarily used it to store the credentials which was extremely useful for modeling authentication relationships between accounts. For example, if I authenticate my twitter account with google, this relationship can be easily represented on a graph display.
Another key feature was the use of haveibeenpwned API which helps automate breach checking for all the accounts. Haveibeenpwned is a public tool which scans through data breaches. If it reports that any account is breached, we will run graph search to propagate this breach to other potentially affected accounts.
Of course, like any good password manager, we also keep track of all previous passwords to ensure that updated passwords are not similar using levenshtein distance
Other quality of life features include a simple drag an drop of your Google Chrome saved credentials which would be parsed by our password manager and smartly detects relationships by comparing the credentials used. In addition we built a Chrome extension to help you autofill your credential details when logging in to an account saved with our password manager
Thank you for your time! Please do take a look at our app and feel free to ask any questions!
Log in or sign up for Devpost to join the conversation.