Passman

🔐 Open source password manager with Nextcloud integration

Cybersecurity & Ethical HackingJavaScriptAGPL-3.0

Abstract

Passman is an open-source Cybersecurity & Ethical Hacking project. 🔐 Open source password manager with Nextcloud integration. Passman is a full featured, open source password manager for Nextcloud. It is built using JavaScript. Key capabilities include: Multiple vaults; Vault keys are never sent to the server; 256-bit AES-encrypted credentials (see security). The complete source code is publicly available on GitHub under the GNU Affero General Public License v3.0, making it a useful reference for students building a Cybersecurity & Ethical Hacking mini project or final-year project.

1. Introduction

Passman is a full featured, open source password manager for Nextcloud.

Visit the “Passman General Talk” Telegram Group to participate in all sorts of topical discussions about Passman and its apps!

2. Objective

🔐 Open source password manager with Nextcloud integration

This project demonstrates how JavaScript can be applied to a real-world Cybersecurity & Ethical Hacking problem.

3. Key Features / Modules

  • Multiple vaults
  • Vault keys are never sent to the server
  • 256-bit AES-encrypted credentials (see security)
  • User-defined custom credentials fields
  • Built-in OTP (One Time Password) generator
  • Password analyzer
  • Securely share passwords internally and via link
  • Import from various password managers (experimental):
  • LastPass
  • DashLane

4. Technology Stack

JavaScript

5. System Requirements

General requirements for this technology stack — check the README for exact versions.

  • Node.js (LTS) and npm
  • A modern web browser
  • VS Code or any code editor
  • Git (to clone the repository)

6. Installation & Setup

git clone https://github.com/nextcloud/passman.git
cd passman

Full setup instructions are in the project README.

7. Future Enhancements

Suggested extensions you can add to make this your own project.

  • Add logging and alert notifications (email / Telegram)
  • Write a threat model document for the tool
  • Package it with Docker for safe lab testing

8. Viva / Review Questions

Common questions examiners ask for projects in this domain.

  1. Which threat or attack does this project defend against?
  2. What detection or protection technique is used and what are its limits?
  3. How are false positives and false negatives handled?
  4. Which cryptographic algorithms or security standards are involved?
  5. What legal and ethical rules apply when testing a tool like this?

9. Source Code & License

This project is developed by nextcloud and published on GitHub under the GNU Affero General Public License v3.0. Please follow the license terms and credit the original author when you use or modify this code.

View Source on GitHubDownload ZIP

Want to build this as your internship project?

Work on a Cybersecurity & Ethical Hacking project like this with mentor guidance, weekly reviews and an internship certificate from Training Trains, Erode — online or offline.

Apply for Cybersecurity & Ethical Hacking Internship