LazLock Password manager

[CyberFilth]

Hi,

I've written a small, password manager in Lazarus. The code and binaries are hosted here:
https://sourceforge.net/projects/lazlock/

With a short tutorial here:
https://www.cpunk-security.com/lazlock2.html

I've tried to take what I like from other password managers and then just strip out all of the features that seemed like bloat. LazLock is lightweight, not fancy, and runs nicely on Windows and Linux.

[shobits1]

good, but for instance
click edit when no item selected results in access violation.
your password strength meter is not good at all; with 128 length and Lowercase/Brackets/Symbols it indicates strength of 60 changing Lowercase to uppercase (or numbers) bring it to 70??!!!! ; lowercase and uppercase statistically should be the same, numbers should be lower... even more with only lowercase the meter shows poor with strength of 10???!!!!! even with only lowercase a password that long should be very strong.

[CyberFilth]

Thanks for pointing out the access violation. I'd greyed out the edit option when no entry is selected in normal use, but omitted to hide it when the program first opens. I'll add a fix to that now.

As for the password strength meter, I've been reading a lot of articles on password strength / entropy lately. If you could post a link to something then I'm definitely up for learning more and improving.

The original password strength meter used shannon entropy but seemed to give really inconsistent results. I'd like to try using it somehow though in the future.

[shobits1]

I don't know a lot in the subject, but maybe you can take look at https://github.com/dropbox/zxcvbn , I read that its fairly good and I think its used by kaspersky https://password.kaspersky.com/ ... It is also ported to other language (unfortunately no pascal)

[CyberFilth]

The password generator has been totally updated to the point where I think it's now ready for daily use.

Support for German, Polish, Portuguese & Brazilian Portuguese languages has been added. It's the first time that I've used localization in a program.
The password strength meter has been updated to use a modified form of Shannon entropy.

The code and binaries are hosted at https://sourceforge.net/projects/lazlock/
and the website with a tutorial has been updated at https://www.cpunk-security.com/lazlock.html

[mizar]

I can't find the source code at sourceforge. Is it available or not?

Thanks anyway 

[CyberFilth]

It is, if you click on CODE at the top of the page it'll take you to https://sourceforge.net/p/lazlock/code/HEAD/tree/
trunk contains the latest code