Smart Password Manager Desktop ^v2.3.1

Cross-platform desktop manager for deterministic smart passwords. Generate, manage, and retrieve passwords without storing them. Your secret phrase is the only key you need.

🔐 Core Principles:

• 🔐 Zero-Password Storage: No passwords are ever stored or transmitted
• 🔑 Deterministic Regeneration: Passwords are recreated identically from your secret phrase
• 📝 Metadata Management: Store only descriptions and verification keys
• 🖥️ Local Processing: All cryptographic operations happen on your device
• 🔄 On-Demand Discovery: Passwords exist only when you generate them

What You Can Do:

1. Create Smart Passwords: Generate deterministic passwords from secret phrases
2. Store Metadata Securely: Keep password descriptions and lengths without storing passwords
3. Regenerate Passwords: Recreate passwords anytime using your secret phrase
4. Manage Services: Organize passwords for different accounts and services
5. Edit Metadata: Update password descriptions and lengths
6. Copy to Clipboard: One-click password copying for easy use
7. Verify Secrets: Prove knowledge of secrets without exposing them
8. Export/Import: Backup and restore your password metadata
9. Cross-Platform Management: Windows, Linux and macOS support with consistent interface

Key Features:

• ✅ No Password Database: Eliminates password storage completely
• ✅ Dark Theme Interface: Easy on the eyes during extended use
• ✅ Public Key Verification: Verify secret knowledge without exposure
• ✅ Table View: See all your password metadata at a glance
• ✅ Edit Functionality: Update descriptions and lengths anytime
• ✅ Secure Input: Hidden secret phrase entry with show/hide toggle
• ✅ Copy to Clipboard: Quick password copying for account setup
• ✅ Export/Import: Backup and restore functionality
• ✅ Desktop Native: No web dependencies or internet required

Security Model:

• Proof of Knowledge: Verify you know a secret without storing it
• Deterministic Security: Same secret + length = same password, always
• Metadata Separation: Non-sensitive data stored separately from verification
• Local Processing: No data leaves your computer
• No Recovery Backdoors: Lost secret = permanently lost access (by design)

⚠️ Critical Notice

BEFORE USING THIS SOFTWARE, READ THE COMPLETE LEGAL DISCLAIMER BELOW

View Legal Disclaimer & Liability Waiver

Usage of this software constitutes acceptance of all terms and conditions.

📚 Research Paradigms & Publications

• Pointer-Based Security Paradigm - Architectural Shift from Data Protection to Data Non-Existence
• Local Data Regeneration Paradigm - Ontological Shift from Data Transmission to Synchronous State Discovery

🔬 Technical Foundation

Powered by smartpasslib v2.2.0+ - The core library for deterministic password generation.

Key principle: Instead of storing passwords, you store verification metadata. The actual password is regenerated on-demand from your secret phrase.

What's NOT stored:

• Your secret phrase
• The actual password
• Any reversible password data

What IS stored (in ~/.config/smart_password_manager/passwords.json):

• Public verification key (hash of secret)
• Service description
• Password length parameter

Export format: Same JSON structure, can be backed up and restored across different machines running the same software version.

Security model: Proof of secret knowledge without secret storage or password transmission.

📁 File Locations

Starting from smartpasslib v2.2.0, configuration files are stored in:

Automatic Migration:

• Old ~/.cases.json files are automatically migrated on first run
• Original file is backed up as ~/.cases.json.bak
• Migration is one-time and non-destructive
• All your existing passwords are preserved

📦 Installation & Quick Start

Prerequisites

• Python 3.7+ required
• Git for cloning repository

Quick Installation

# Clone repository
git clone https://github.com/smartlegionlab/smart-password-manager-desktop.git
cd smart-password-manager-desktop

# Create virtual environment (recommended)
python -m venv venv

# Activate virtual environment
# Linux/macOS: source venv/bin/activate
# Windows: venv\Scripts\activate

# Install dependencies
pip install -r requirements.txt

# Launch application
python app.py

🚀 Quick Usage Guide

Creating Your First Password

1. Click Add button
2. Enter service description (e.g., "GitHub Account")
3. Enter your secret phrase (never shared or stored)
4. Set password length (16-24 recommended)
5. Click Create Password - password appears for copying

Retrieving a Password

1. Find service in table
2. Click Get button
3. Enter your secret phrase
4. Password regenerates identically for copying

Editing Password Metadata

1. Click Edit button next to password
2. Update description or change length
3. Receive warning if changing length
4. Confirm changes

Deleting an Entry

1. Click Delete button (🗑️)
2. Confirm deletion
3. Only metadata removed - password can be recreated

Exporting Passwords

1. Go to File → Export → Export passwords...
2. Choose export format (readable or minified JSON)
3. Select location (filename is auto-generated with timestamp: passwords_export_YYYYMMDD_HHMMSS.json)
4. You can rename the file if needed
5. Click Export

• Note: Auto-generated timestamps prevent accidental file overwrites when exporting multiple times to the same folder.

Importing Passwords

1. Go to File → Import → Import passwords...
2. Select previously exported JSON file
3. Review import summary
4. Click OK to refresh the view

🏗️ Core Components

Main Interface Features

Password Table:

• Description: Service name or account identifier
• Length: Password character count
• Get: Regenerate password with secret phrase
• Edit: Modify description and length
• Delete: Remove entry (metadata only)

Action Buttons:

• Add: Create new password entry
• Help: Detailed usage instructions
• Exit: Close application with confirmation

Security Features:

• Secret phrase hidden by default
• Show/hide toggle for verification
• Copy to clipboard with visual feedback
• No internet connectivity required

⌨️ Keyboard Shortcuts

🖱️ Context Menu

Right-click on any password row to access a context menu with all actions:

This provides an alternative to the table buttons for users who prefer context menus, while keeping the buttons for quick one-click access.

Dialogs Overview

Password Creation Dialog:

• Service description input
• Secret phrase entry (hidden/shown)
• Password length selector (4-100 characters)
• Grouped sections for clear organization

Secret Entry Dialog:

• Service-specific prompts
• Hidden secret input
• Show/hide toggle
• Context-aware instructions

Edit Metadata Dialog:

• Description editing
• Length adjustment with warnings
• Visual feedback for changes
• Clear explanation of effects

Password Display Dialog:

• Generated password display
• Copy to clipboard button
• Service description header
• Security notes and reminders

Export/Import Dialog:

• File selection with browse button
• Format options (pretty/minified JSON)
• Metadata inclusion toggle
• Import warnings and statistics

📦 Windows Standalone Executable

Creating a Single-File *.exe

Build a standalone smart_pass_man.exe that runs without Python installation:

Step 1: Get the Project Files

1. Download project ZIP:
   • Go to: https://github.com/smartlegionlab/smart-password-manager-desktop
   • Click green "Code" button
   • Select "Download ZIP"
   • Extract to: C:\smart-password-manager-desktop-master\

Step 2: Install Python

1. Download Python installer from: https://python.org/downloads/
2. Run installer
3. IMPORTANT: Check ✅ "Add Python to PATH"
4. Click "Install Now"

Step 3: Open Command Prompt

1. Press Win + R
2. Type cmd, press Enter
3. Navigate to project folder:

   cd C:\smart-password-manager-desktop-master

Step 4: Create Virtual Environment

# Create virtual environment
python -m venv venv

# Activate it (IMPORTANT!)
.\venv\Scripts\activate

# You should see (venv) in your command prompt

Step 5: Install Dependencies

# Install PyInstaller in virtual environment
pip install pyinstaller
pip install PyQt5==5.15.9
pip install smartpasslib==2.2.0

Step 6: Build Executable

# Build single .exe file

pyinstaller --onefile --windowed --name "smart_pass_man.exe" --additional-hooks-dir=. app.py

# Wait for build to complete (1-2 minutes)

Step 7: Find and Use

Location: C:\smart-password-manager-desktop-master\dist\smart_pass_man.exe

Create desktop shortcut:

1. Open C:\smart-password-manager-desktop-master\dist\ folder
2. Right-click smart_pass_man.exe
3. Select "Create shortcut"
4. Drag shortcut to desktop
5. Rename shortcut to "Smart Pass Manager"
6. Double-click to start

What you get:

• Single file: smart_pass_man.exe (~50MB)
• No Python required to run
• Works on any Windows 10/11 PC
• Can be copied to USB drive

💡 Advanced Usage

Password Management Strategy

For Multiple Accounts:

Description Examples:
- GitHub Personal Account
- Work Email - Office 365
- Banking Portal - Chase
- Social Media - Twitter
- Cloud Storage - Dropbox

Length Strategy:
- Critical accounts: 20-24 characters
- Important accounts: 16-20 characters
- General accounts: 12-16 characters

Secret Phrase Management

Best Practices:

1. Unique per service - Different secret for each account type
2. Memorable but complex - Phrases you can remember
3. Case-sensitive - v2.3.1 enforces exact case matching
4. No digital storage - Keep only in memory
5. Backup plan - Physical written backup in secure location
6. Export regularly - Backup metadata after adding new passwords

Editing Strategy

When to Edit:

• Update service name after rebranding
• Change length for increased security
• Fix typos in descriptions
• Consolidate similar accounts

Length Change Effects:

• Increasing length: Password extended with new characters
• Decreasing length: Password truncated (first N characters kept)
• Consistency: First characters remain the same

Backup Strategy

Recommended workflow:

1. Export metadata after adding new passwords
2. Store exports in secure, encrypted location
3. Keep exports across different machines for synchronization
4. Test import on a separate machine before relying on backups

🔧 Ecosystem Integration

Part of Smart Password Suite

Core Technology:

• smartpasslib - Core password generation library

Console Applications:

• CLI Smart Password Generator - Terminal-based generation
• CLI Smart Password Manager - Command-line management

Web Interface:

• Web Smart Password Manager - Browser-based access

Data Compatibility

• Uses same ~/.config/smart_password_manager/passwords.json format as CLI tools
• Export files compatible across all ecosystem tools
• Consistent cryptographic operations across platforms

Testing

• Manual testing for UI interactions
• Cross-platform compatibility verification
• Secret phrase validation testing
• Clipboard operations verification
• Import/Export functionality testing

📜 License

BSD 3-Clause License

Copyright (©) 2026, Alexander Suvorov

THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

🆘 Support

• Desktop Manager Issues: GitHub Issues
• Core Library Issues: smartpasslib Issues
• Documentation: Inline help and this README

Note: Always test password generation with non-essential accounts first. Implementation security depends on proper usage.

⚠️ Security Warnings

Secret Phrase Security

Your secret phrase is the cryptographic master key

1. Permanent data loss: Lost secret phrase = irreversible loss of all derived passwords
2. No recovery mechanisms: No password recovery, no secret reset, no administrative override
3. Deterministic generation: Identical input (secret + length) = identical output (password)
4. Single point of failure: Secret phrase is the sole authentication factor for all passwords
5. Secure storage required: Digital storage of secret phrases is prohibited

Critical: Test password regeneration with non-essential accounts before production use

Export/Import Security Notes

• Export files contain ONLY metadata (public keys, descriptions, lengths)
• No passwords or secret phrases are ever exported
• Export files are plain JSON - store them securely
• Treat exported metadata as sensitive information

📄 Legal Disclaimer

COMPLETE AND ABSOLUTE RELEASE FROM ALL LIABILITY

SOFTWARE PROVIDED "AS IS" WITHOUT ANY WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NONINFRINGEMENT.

The copyright holder, contributors, and any associated parties EXPLICITLY DISCLAIM AND DENY ALL RESPONSIBILITY AND LIABILITY for:

1. ANY AND ALL DATA LOSS: Complete or partial loss of passwords, accounts, credentials, cryptographic keys, or any data whatsoever
2. ANY AND ALL SECURITY INCIDENTS: Unauthorized access, data breaches, account compromises, theft, or exposure of sensitive information
3. ANY AND ALL FINANCIAL LOSSES: Direct, indirect, incidental, special, consequential, or punitive damages of any kind
4. ANY AND ALL OPERATIONAL DISRUPTIONS: Service interruptions, account lockouts, authentication failures, or denial of service
5. ANY AND ALL IMPLEMENTATION ISSUES: Bugs, errors, vulnerabilities, misconfigurations, or incorrect usage
6. ANY AND ALL LEGAL OR REGULATORY CONSEQUENCES: Violations of laws, regulations, compliance requirements, or terms of service
7. ANY AND ALL PERSONAL OR BUSINESS DAMAGES: Reputational harm, business interruption, loss of revenue, or any other damages
8. ANY AND ALL THIRD-PARTY CLAIMS: Claims made by any other parties affected by software usage

USER ACCEPTS FULL AND UNCONDITIONAL RESPONSIBILITY

By installing, accessing, or using this software in any manner, you irrevocably agree that:

• You assume ALL risks associated with software usage
• You bear SOLE responsibility for secret phrase management and security
• You accept COMPLETE responsibility for all testing and validation
• You are EXCLUSIVELY liable for compliance with all applicable laws
• You accept TOTAL responsibility for any and all consequences
• You PERMANENTLY AND IRREVOCABLY waive, release, and discharge all claims against the copyright holder, contributors, distributors, and any associated entities

NO WARRANTY OF ANY KIND

This software comes with ABSOLUTELY NO GUARANTEES regarding:

• Security effectiveness or cryptographic strength
• Reliability or availability
• Fitness for any particular purpose
• Accuracy or correctness
• Freedom from defects or vulnerabilities

NOT A SECURITY PRODUCT OR SERVICE

This is experimental software. It is not:

• Security consultation or advice
• A certified cryptographic product
• A guaranteed security solution
• Professional security software
• Endorsed by any security authority

FINAL AND BINDING AGREEMENT

Usage of this software constitutes your FULL AND UNCONDITIONAL ACCEPTANCE of this disclaimer. If you do not accept ALL terms and conditions, DO NOT USE THE SOFTWARE.

BY PROCEEDING, YOU ACKNOWLEDGE THAT YOU HAVE READ THIS DISCLAIMER IN ITS ENTIRETY, UNDERSTAND ITS TERMS COMPLETELY, AND ACCEPT THEM WITHOUT RESERVATION OR EXCEPTION.

Interface