apple/password-manager-resources
Password Manager Resources
This project is a knowledge base and collection of static resources for password manager development. It provides a centralized repository of data and rules used to identify website credential behaviors and password complexity requirements.
The resource set includes a mapping of native application identifiers to web domains to facilitate credential sharing and a registry of website quirks to handle non-standard authentication flows. It also contains a system for grouping affiliated domains that share credentials to improve the accuracy of account suggestions.
The project covers a broad range of credential management capabilities, including the localization of password change pages, detection of third-party credential requests, and the identification of sites that require two-factor codes to be appended to passwords. It also includes a rule parser that converts human-readable password complexity requirements into machine-readable formats and mappings that connect web browsers to their respective extension stores.
Features
- Password Management - Provides a knowledge base of website behaviors and password requirements for password manager development.
- Knowledge Bases - Acts as a centralized knowledge base of website credential behaviors and password complexity requirements for password manager developers.
- Credential Behavior Quirks - Maps specific web domains to non-standard credential behaviors to ensure correct password manager handling.
- Autofill Integrations - Improves login suggestions by mapping shared domains and linking native application IDs to web accounts.
- Shared Web Credentials - Groups websites that share a single set of credentials to provide relevant account suggestions across affiliated domains.
- Cross-Platform Identity Integration - Associates native application identifiers with web domains to enable credential sharing across platforms.
- Domain Association Services - Associates native application identifiers with web domains to suggest matching credentials for apps.
- Credential Behavior Maps - Provides a comprehensive registry of website authentication quirks and domain-sharing rules to optimize password manager autofill.
- Domain-Shared Credentials - Clusters affiliated domains that share a single set of user credentials for unified account suggestions.
- Web-App Credential Sharing - Links native application identifiers with web domains to enable seamless credential sharing between apps and browsers.
- Complexity Requirement Lookups - Maps domains to specific password complexity and character requirements to ensure generated passwords are compatible.
- Policy-Aware Generators - Ensures generated passwords meet specific website complexity and character requirements using a rule database.
- Static Data Distributions - Provides a centralized collection of static data files for password managers to synchronize site behaviors.
- Password Complexity Parsers - Converts human-readable password rule strings into machine-readable formats for application runtimes.
- Web Auth Behavior Handling - Manages non-standard website behaviors, such as two-factor code appending, to prevent autofill errors.
- Complexity Rule Parsers - Implements a rule parser that converts human-readable password complexity requirements into machine-readable formats.
- Password Manager Resource Maps - Ships a curated collection of browser extension store mappings and account security page URLs.
- Third-Party Frame Detectors - Identifies third-party frames that request external credentials to prevent incorrect password saving.
- Credential Request Detectors - Identifies domains that request credentials for other services when embedded as third-party frames.
- 2FA Appending Detection - Identifies websites that require two-factor codes to be appended to passwords to prevent accidental auto-submission.
- Security Page Localizations - Maps domains to their specific password reset or change URLs to facilitate direct navigation to security settings.
- Rule Parsers - Converts human-readable password complexity requirements into machine-readable formats using JavaScript or Rust.
- Password and MFA Management - Collects password rules and site-specific quirks for password managers.
