Password Manager Resources
A collaborative collection of data and code quirks to improve password manager compatibility with websites.
What is Password Manager Resources?
Password Manager Resources is a collaborative open-source project that collects and shares structured data about website-specific behaviors affecting password managers. It provides quirks like password generation rules, shared credential mappings, and change password URLs to help password managers work more seamlessly across the web. The project aims to reduce compatibility issues and improve the user experience of password management tools.
Password manager developers and maintainers who need to handle website-specific authentication quirks, as well as security researchers and web developers interested in improving password management interoperability.
It offers a centralized, community-driven dataset that eliminates the need for each password manager to independently discover and maintain compatibility quirks, leading to faster improvements and better user experiences across all participating tools.
Overview
A place for creators and users of password managers to collaborate on resources to make password management better.
Use Cases
Best For
- Password manager developers needing rules for generating compatible passwords per website
- Implementing credential suggestions across affiliated websites (shared credentials)
- Directing users to change password pages via known URLs
- Handling websites that require appending 2FA codes to passwords
- Linking iOS/macOS apps to domains for system AutoFill improvements
- Discovering web browsers for companion extension distribution
Not Ideal For
- Developers building password managers that don't support Apple's Password Rules language or iOS/macOS AutoFill
- Projects requiring real-time, automated updates without manual community contribution processes
- Teams needing comprehensive coverage for niche or rapidly changing websites not in the dataset
- Applications that require guaranteed accuracy and liability for all authentication quirks
Pros & Cons
Pros
Reduces redundant work across password managers by pooling quirks data, accelerating compatibility improvements as highlighted in the project's philosophy of collaboration.
Provides machine-readable password generation rules using Apple's Password Rules language, enabling consistent password creation for specific websites, detailed in the Password Rules section.
Enhances AutoFill on iOS and macOS with App ID to domain mappings, improving credential suggestions in native apps, as explained in the Apple App IDs section.
Publicly documents website quirks to incentivize adoption of web standards like Change Password URLs, encouraging better compatibility as noted in the benefits list.
Cons
Heavily favors Apple's ecosystem with Password Rules language and App ID mappings, limiting utility for password managers on other platforms or without Apple integration.
Relies on slow, community-driven contributions via GitHub, which may not keep pace with website changes or cover all needed quirks, as admitted in the maintenance section.
As a volunteer-driven project, data accuracy and completeness are not guaranteed, with gaps for less popular websites and reliance on historical files for past relationships.
Frequently Asked Questions
Related Projects
DshellDshell is a network forensic analysis framework.
Dumb Password RulesA compilation of sites with dumb password rules.
ClevisAutomated Encryption Framework
A Well-Known URL for Changing PasswordsA Well-Known URL for Changing Passwords
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.