6 min. read
Show me your entropy and I'll break your password!
PART 1: What is entropy? This article defines entropy and its importance in assessing password strength.
We are excited to introduce the first stable release, Version 1.0, of the Passbolt Windows Desktop Application. This milestone represents a significant leap towards providing a production-ready password collaboration solution tailored for the Windows environment.
Version 1.0 objectives
The primary goal for Version 1.0 was twofold: to achieve a nearly complete set of user features (with administrative capabilities to follow) and to undergo a rigorous security audit. This approach ensures that the application meets the functional and security standards necessary for deployment in production environments.
Meeting security requirements
The desktop application, crafted with UWP, draws its security strengths from Microsoft's latest advancements in the matter of development of modern application and security on one hand, and on the other, it utilizes components from the web application that have previously passed multiple security audits. This dual approach ensures robust security measures are embedded in the application.
Moreover, version 1.0 upholds rigorous standards by successfully undergoing a code review conducted by our long-term security collaborator, Cure53. This pivotal review was indispensable in transitioning the application from beta to a version ready for deployment in production environments. The findings of the audit were fixed prior to this release, and as usual the report is available publicly on our public website.
Featuring a complete user toolkit
Version 1.0 is designed to serve as a robust alternative for users who prefer the desktop environment over the web application. It mirrors the web version's user capabilities closely, offering nearly all the functionalities that end users rely on for their daily password management needs. From creating and storing to retrieving and sharing passwords, users will be able to manage their credentials as smoothly as on the web version.
Looking Ahead
The journey doesn’t stop here. The vision for the future of the Passbolt Windows Desktop Application includes deeper integration within the Windows ecosystem. Here are some of the enhancements that are currently being evaluated.
- Independent desktop application: Allow users to use the desktop application without requiring the browser extension first hand to register a new account.
- Biometry: By leveraging Windows Hello, the desktop application could offer a convenient way for users to authenticate themselves, enhancing the overall user experience.
- Auto-fill Functionality with Other Applications: Expanding beyond web browsers, passbolt could introduce auto-fill capabilities with other desktop applications, streamlining the workflow for users across their tools.
- Support for Specific Content Types: Imagine being able to open a terminal and connect to a SSH server with just one click. Expanding the range of content types is a primary focus for Passbolt in 2024, and this initiative is expected to reach new heights with the desktop application, which is designed to integrate seamlessly with the existing ecosystem.
Stay Involved
As we continue to develop and refine the Passbolt Windows Desktop Application, your feedback and participation are crucial. We encourage you to join the community forum to share your thoughts on potential features and improvements.
For those looking to engage more deeply, there are several ways you can contribute to the project. Whether you have skills in coding, language translation, or other areas, your expertise can make a significant difference. To learn more about how you can contribute, please visit the "How to Contribute" section of our website.
Conclusion
In conclusion, the release of Version 1.0 is a significant milestone that extends Passbolt's capabilities beyond the web and mobile ecosystems, ensuring a seamless user experience across all platforms.
We are thankful to all the beta testers whose insights over recent months have been crucial in refining and stabilising the solution. We also extend our gratitude to Cure53 for their expertise and assistance in maintaining the highest security standards.
