Password Hasher

Password Hasher

Secure password hashing with PBKDF2-SHA256, strength analysis, password generation, and timing-safe verification. Zero dependencies.

Part of the Auth Vault toolkit by [CodeVault](https://codevault.dev).

Features

• PBKDF2-HMAC-SHA256 hashing with 600,000 iterations (OWASP 2024)
• Password strength analyzer: entropy, complexity, pattern detection
• Common password detection via built-in blocklist
• Timing-safe comparison to prevent timing attacks
• Hash format versioning for algorithm migration
• Secure password generator with configurable complexity
• CLI tool for hashing, verifying, and strength checking
• Zero dependencies — Python stdlib only

Quick Start

# Hash a password
python3 src/main.py hash --password "MyS3cur3Pass!"

# Verify a password against a hash
python3 src/main.py verify --password "MyS3cur3Pass!" \
    --hash '$pbkdf2-sha256$600000$...'

# Check password strength
python3 src/main.py strength --password "test123"

# Generate a secure password
python3 src/main.py generate --length 20

Using as a Library

from main import PasswordHasher, StrengthAnalyzer

hasher = PasswordHasher(iterations=600000)

# Hash a password
hashed = hasher.hash("MyS3cur3Pass!")
print(f"Hash: {hashed}")

# Verify a password
is_valid = hasher.verify("MyS3cur3Pass!", hashed)
print(f"Valid: {is_valid}")

# Check strength
analyzer = StrengthAnalyzer()
result = analyzer.analyze("test123")
print(f"Score: {result.score}/100")
print(f"Entropy: {result.entropy_bits:.1f} bits")
print(f"Feedback: {result.feedback}")

Hash Format

Hashes use a self-describing format for future-proof migration:

... continues with setup instructions, usage examples, and more.