OormiPass

+1 hope this comment is top. They use it for salt and password generation: https://github.com/oormicreations/OormiPass/blob/1a6f0b99613... Also, > The master password is not stored. An SHA256 salted hash is stored instead. Have they heard of scrypt or argon2? And they're not using a KDF(!!!!!!) With sha256. Dear Authors,if you ever read this,please look at: https://cryptopp.com/wiki/Key_Derivation_Function And https://cryptopp.com/wiki/RandomNumberGenerator

rand() [1] is not a secure source of randomness. I strongly recommend against using that password manager since it is not secure. [1] https://github.com/oormicreations/OormiPass/blob/d1d2bf5100f...

On Github: https://github.com/oormicreations/OormiPass Features: * Stores passwords securely using AES encryption. * Requires only one master password to access all passwords. * Stores other useful info like usernames, urls, notes etc. * Items are categorized neatly into groups, which can be accessed easily by simply clicking their names in the list. * Users can customize the groups and all items in the group. * Open URLs directly from Oormi Pass and paste your username and password. Save precious time. * Functions to auto log out and change master password. * Hide or show passwords. * Built in password generator. * Minimal UI. * Runs on MS Windows 7 to 10, Linux and Mac OS. * Code::Blocks 17.12, MinGW, C++11, wxWidgets 3.1.2 * Dependencies: wxWidgets 3.1.2, wxSmith, Crypto++ 5.6.3 Binary for Windows (exe) is available.