03-third-parties — Password Manager Tab

This tab implements a web-based lightweight password manager for teams. It allows you to save, view, and manage passwords and related info for third-party accounts/services in a secure file.

Features

Store: Save site/service, username, password, OTP secret, and card details for each entry.
Password Generation: Generate strong random passwords.
Copy to Clipboard: Instantly copy any password to clipboard with one click (no password is exposed/revealed by default).
OTP Code Preview: If an OTP secret is stored, the current code is shown next to the entry.
Edit Protections: All form submissions use POST and require confirmation before deleting an entry.
Encrypted Storage: All credentials are saved in an encrypted JSON file (passwords.json.enc).

File Overview

01_constants.php — Defines file paths and any constants for this tab.
02_supportFuncs.php — Helper functions for managing and encrypting credentials, generating OTPs, etc.
03_handler.php — Logic for processing form submissions and updating the password list.
04_nav-item.html.php — Generates the navigation item for this password manager tab.
05_content.html.php — Main UI and form rendering for password management, entry listing, and actions.
06_modals.html.php — (Not used / empty or for modal dialogs).
07_javascript.js — Handles client-side UX, e.g. copying passwords to clipboard.
passwords.json.enc — The encrypted vault file storing all team credentials.

Usage

Navigate to the "Password Manager" tab in the interface.
Add new credentials with their site, username, password, OTP, card details, etc.
Use the 📋 button next to any password to copy it to your clipboard.
To delete an entry, click the red ✖ button and confirm.

Security Notes

All credentials are stored only on the server, encrypted at rest.
Passwords are shown as dots by default; they can only be copied (not revealed) for safety.
Use secure team practices with this tool and limit exposure of your admin interface.

Customizing

To change storage or encryption, update 02_supportFuncs.php and references to passwords.json.enc.
UI layout can be modified in 05_content.html.php.
Client logic (like clipboard copying) is in 07_javascript.js.

This tab is intended for lightweight, shared team secrets/password management. For high-security requirements, use a dedicated enterprise password vault solution.

2.5 KiB Raw Blame History