Safe way to store password in open source app

[lorli]

I was thinking about making my terminal password manager and I want to make every of my apps +- good. So what I want is to store password for example hashed in file, but someone can just look at the code on my pc and see what I did to hash it and just unhash (Probably nobody will ever do that, but as I said I want to make it some safe). Is there a way to store it safely when someone can just look at source code of my app? (probably no way to do it) (sorry for maybe bad English)

 

[Antero360]

I was thinking about making my terminal password manager and I want to make every of my apps +- good. So what I want is to store password for example hashed in file, but someone can just look at the code on my pc and see what I did to hash it and just unhash (Probably nobody will ever do that, but as I said I want to make it some safe). Is there a way to store it safely when someone can just look at source code of my app? (probably no way to do it) (sorry for maybe bad English)

Hi there,
Unfortunately, if someone manages to compromise your system, well, they have the keys to the kingdom. As far as "unhashing" is concerned... that is not possible. Hashing is known as a "one way" algo due to the fact that you cannot reverse engineer the hash to get the original input. So as far as storing your passwords are concerned, you should be fine like that. Even if someone does manage to get the code and figure out the hashing algo used, provided that you used a strong hashing algo, they would still have no way of figuring out the password, unless they wanted to sit there and do a bruteforce/rainbow table attack on the hashes.