# purepass-core

> [![npm](https://img.shields.io/npm/v/purepass-core.svg)](https://npmjs.com/package/purepass-core) [![Travis](https://img.shields.io/travis/purepass/purepass-core.svg)](https://travis-ci.org/purepass/purepass-core) [![Greenkeeper badge](https://badges.gree

Latest version **5.0.0** (published 2019-01-23) · MIT license · 0 weekly downloads

## Install

```sh
npm install purepass-core
pnpm add purepass-core
yarn add purepass-core
bun add purepass-core
```

## Health

**Score 30/100 (F)** — status: abandoned.

Positive: has types; esm support; no vulnerabilities; high quality score.

Warnings: low downloads.

Negative: abandoned; low maintenance score.

## Facts

| | |
|---|---|
| Version | 5.0.0 |
| Published | 2019-01-23 |
| First published | 2019-01-23 |
| Weekly downloads | 0 |
| License | MIT |
| TypeScript types | bundled |
| Module format | ESM + CommonJS |
| Node | >=6.0.0 |
| Dependencies | 3 |
| Unpacked size | 194.4 KB |
| Known vulnerabilities | 0 (+2 in 1 direct dependencies) |
| Install scripts | no |
| Author | Matt Johnston |
| Maintainers | mattjohnston |

## Links

- npm: https://www.npmjs.com/package/purepass-core
- Repository: https://github.com/purepass/purepass-core
- Homepage: https://github.com/purepass/purepass-core#readme
- Issues: https://github.com/purepass/purepass-core/issues
- npm.io page: https://npm.io/package/purepass-core

## Dependencies (3)

- [crypto-js](https://npm.io/package/crypto-js.md) ^3.1.9-1
- [current-type-of](https://npm.io/package/current-type-of.md) ^2.0.0
- [purepass-validators](https://npm.io/package/purepass-validators.md) ^3.0.0

## Recent versions

- 5.0.0 (latest) — 2019-01-23

## README

# purepass-core

[![npm](https://img.shields.io/npm/v/purepass-core.svg)](https://npmjs.com/package/purepass-core)
[![Travis](https://img.shields.io/travis/purepass/purepass-core.svg)](https://travis-ci.org/purepass/purepass-core)
[![Greenkeeper badge](https://badges.greenkeeper.io/purepass/purepass-core.svg)](https://greenkeeper.io/)
[![Coveralls](https://img.shields.io/coveralls/purepass/purepass-core.svg)](https://coveralls.io/github/purepass/purepass-core)

[purepass-core docs generated with TypeDoc](https://purepass.github.io/purepass-core/)


## the problem
The biggest vulnerability we all face in web security is that passwords are hard.

Certain websites require different password traits, such as upper-case and lower-case letters, symbols, and minimum length.

This puts a burden on us to keep passwords complicated, making them even more difficult to remember.

To make matters worse we shouldn't re-use passwords because this can turn any one compromised password into many breaches.

## the solution

purepass takes a secret, and a namespace, and they are hashed together using sha256 and other optional configuration to generate a password 64 characters in length, with all the traits any website requires.

It is advisable that you choose a new secret for every site, but if thats too much (you aren't alone!), changing the namespace from one site to the next will ensure that your 64 character password will be entirely different for each site or service you log in to.

Instead of the 'one password' approach where you lock many different passwords behind a master password, purepass only requires you to remember one secret, and the arbitrary namespace you chose for the service, and you can just run it again with the promise that it will always generate the same 64 character password, provided you pass the same parameters.

## usage

This package is the core library for generating passwords, the source will always be public, and UI for ease of use is coming _soon™_

## disclaimer

This is my first crypto-related project, and I wouldn't adopt it just yet without first understanding the source code. Though the algorithm is unlikely to change, it is early in development. Contributions are welcomed and encouraged!

---
_Source: https://npm.io/package/purepass-core · Machine-readable twin of the npm.io package page. Health data is recomputed on every publish._