RoutineHub • Password Manager

Features

•Requires a Master Password to enter app
•Displays how many failed master password attempts
•Add a Password containing website/server, username and password
•View a saved username and password •Edit a saved username and/or password •Manage saved Passwords
•Copy a saved username or password
•View failed Master Password attempts and it date and time failed
•Reset failed Master Password attempts to 0
•Import created passwords from Custom Password Generator
•Compatible with UpdateKit

@martindb1988

The master password for the logins is stored as number on top of the shortcut. Don't you think that is a little bit to easy?
Reply · 1 year, 3 months ago

@Changmeister Author

Thank you for giving me feedback on this problem. I have updated it so the master password is no longer visible at all
Reply · 1 year, 3 months ago

@snowbeachking

Passwords are saved in clear text at iCloud Drive? If so, do you think this makes sense?
Reply · 1 year, 3 months ago

@Changmeister Author

Hi there, i have recently updated Password Manager so that all passwords including the master password are encoded in icloud drive, and can only be decoded in shortcuts. This major update means that you will have to remove all passwords including the master passwords otherwise they will not be encoded.
Reply · 1 year, 3 months ago

@vitim

DO NOT USE THIS! this is a security threat! Stores passwords unencrypted, it also updates itself so it can upload all your passwords to a remote server at anytime without your concent!
Reply · 1 year, 2 months ago

@Changmeister Author

Hi vitim, I’m sorry you didn’t like this Shortcut. I’m not sure I understand what you mean by ‘it stores passwords unencrypted’, because if you check in the actions, it encodes it into ‘base 64’ before it uploads it to iCloud unlike autofill. Also, you said that it uploads ‘all your passwords to a remote server at anytime without your consent’. Yes, it does upload the password to iCloud encrypted, but it doesn't upload it to any website that can hack your logins.
Reply · 1 year, 2 months ago

@vitim

I’m sorry if my reply sounded harsh in any way. I believe you have good intentions, but I also believe you don’t understand how encryption works, base64 ENCODING has nothing do to with ENCRYPTION. It doesn’t add any security just ofuscation, it is the same storing plain text.
Reply · 1 year, 2 months ago

@Changmeister Author

Im sorry about the misunderstanding. I’m trying to find a way to encrypt text, but there only seems to be Base64 Encode.
Reply · 1 year, 2 months ago

@vitim

About the “remote server” I didn’t mean the users iCloud, I mean an attacker remote server. Since this shortcut updates itself, there’s nothing stopping you or a man-in-the-middle (the update url is http not https which is another security vulnerability) of changing the shortcut to do something else like: download the passwords file from iCloud and send it via post to a server, use base64 decode then voilá all passwords stolen
Reply · 1 year, 2 months ago

@Changmeister Author

When you say the update url, do you mean http://www.mikebeas.com/updatekit/ ?
Reply · 1 year, 2 months ago

@vitim

Yes, when the user tries to reach this address it is not guaranteed that the response their getting is actually from “mikebeas.com”, because the response it transmitted on the network as plain text and any attacker in the network can forge this to download a malicious shortcut instead. This is mostly due to that server not being httpS and having a certificate.
Reply · 1 year, 2 months ago

@Changmeister Author

I have updated Password Manager so that updateKit (the website with http) is no longer needed. Only https websites are passed through.
Reply · 1 year, 2 months ago

Password Manager

Add, Delete, Edit and View your Passwords

Description

About

Features

Screenshots

Youtube Video

Latest Release Notes

Feedback