Security Tool

Generate Encryption Key

This page generates a new master key for the Password Pusher application.

Why Use a Custom Key?

Password Pusher encrypts sensitive data in the database. Although there is a default key included, it's best practice to use your own custom encryption key.

With each refresh, this page generates a new encryption key. You can use the randomly generated code below to configure your Password Pusher instance.

Generated Key

Refresh the page to generate a new key

You can apply this key to your application by setting the environment variable PWPUSH_MASTER_KEY.

Reload this page to re-generate a new key.

Important Notes

1

If an encryption key isn't provided, a default key will be used.

2

The best security for private instances of Password Pusher is to use your own custom encryption key although it is not required.

3

The risk in using the default key is lessened if you keep your instance secure and your push expirations short. e.g. 1 day/1 view versus 100 days/100 views.

4

Once a push expires, all encrypted data in that push is deleted.

5

Changing an encryption key where old pushes already exist will make those older pushes unreadable. In other words, the payloads will be garbled. New pushes going forward will work fine.

Command Line Generation

Key generation can also be done from the command line in the application source by executing:

# Navigate to the application directory
cd /opt/PasswordPusher
# Open the Rails console
bin/pwpush console
# Generate a new key
Lockbox.generate_key