How to Build a Secure CLI Password Manager in Python Using Fernet Encryption

·1 views

A tutorial published on DEV Community walks developers through building a command-line password manager in Python using the cryptography library's Fernet symmetric encryption scheme. The project stores credentials in an encrypted file that is unreadable without a master key, protecting against both unauthorized access and file tampering. Developers need Python 3.11 or later along with the cryptography and pyperclip libraries to get started. The core of the project is a PasswordManager class that handles key generation, password encryption, decryption, and clipboard copying. The guide emphasizes that storing passwords in plain text remains a widespread security risk that this self-hosted tool is designed to eliminate.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Why Most Startups Should Avoid Complex Infrastructure and Right-Size Their APIs

A software engineer argues that startups routinely over-engineer their infrastructure by adopting Kubernetes and complex setups long before user scale demands it. In one real-world case, migrating a project from a costly Kubernetes cluster to AWS Lambda, SQS, and App Runner cut monthly infrastructure costs from thousands of dollars to roughly $50. The post breaks down serverless platform limits, showing that AWS Lambda can theoretically handle up to 8.6 billion requests per month, well beyond what most early-stage startups require. The author recommends using managed containers for user-facing APIs and reserving serverless functions for event-driven or bursty workloads like webhooks and scheduled jobs. The central advice is to treat scaling as an 'earned problem' — only invest in complex infrastructure once actual traffic demands it, not in anticipation of hypothetical growth.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

How a 'Dead-Man's Switch' Catches Silent Cron Job Failures Before Data Rots

A solo developer running multiple production systems discovered a critical blind spot when a scheduled curation job silently stopped running, leaving stale data served undetected for days. Unlike loud failures that trigger error alerts, the job produced no exceptions or log warnings, and all downstream health checks remained green. The developer's fix involved a two-part dead-man's switch: the job writes a timestamp only on verified success, and a separate watcher on an independent runtime alerts if that stamp grows too old. Crucially, the watcher runs in a different failure domain so it can catch the job's silence even if the job itself is completely dead. The threshold for triggering an alert must be tuned to the content's natural update rhythm rather than the job's schedule, to prevent alert fatigue from rendering the safeguard useless.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Developer Fixes Auto-Publish Pipeline That Posted a Two-Year-Old Story as Breaking News

A solo developer running a fully automated content pipeline built on Cloudflare Workers and D1 discovered in July that the system had published a two-year-old news story as if it were current. The error occurred because an aggregator resurfaced the old article with a fresh feed timestamp, and two existing safeguards — a recency check and an LLM scoring judge — both passed it through, each blind to the staleness in different ways. The recency check only applied to product items, not news, while the LLM judge scored the story highly because its rubric never asked whether the content was current. After a routine quality check caught the mistake within days, the developer replaced a planned single-line fix with a three-layer solution: widening the deterministic date check to all content types, adding a currency criterion to the LLM rubric, and extracting the actual event date from article text to cross-check against feed metadata. The incident highlighted how automated pipelines inherit only the failure modes their builders have already imagined, making layered, overlapping safeguards more reliable than any single guard.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

84% of Devs Use AI Coding Tools, but Confidence Scores Often Go Unverified

A developer building a debugging tool called DebugAI has highlighted a critical flaw in how AI coding assistants present confidence scores: the numbers are self-generated estimates from the model itself, with no mechanical checks behind them. Stack Overflow's 2025 Developer Survey found that 45% of developers say debugging AI-written code takes longer than expected, and 66% cite 'almost right' answers as their top frustration. To address this, DebugAI introduces a three-state 'verified' field — true, false, or null — so users can distinguish between fixes that passed a mechanical check, failed one, or were never checked at all. Currently, the tool runs syntax and import checks for Python and JavaScript, deliberately returning null rather than a false confidence signal when a check is out of scope or times out. The core principle is that collapsing 'not checked' and 'checked and passed' into the same visual output is how tools mislead users without any deliberate intent to do so.

0 comments Read more at DEV Community