wauth Binds Cryptographic Keys to Host Hardware, Blocking Theft of Stolen Backups

Developer William Steve Rodríguez Villamizar has released wauth, an open-source Python library (MIT license) that derives AES-256 Fernet encryption keys directly from a machine's hardware identifiers such as CPU and motherboard UUID. Secrets stored in a local encrypted SQLite vault become mathematically unreadable on any other machine, rendering stolen database backups or leaked environment variables useless to attackers. The library addresses common security gaps including plaintext API keys in environment variables, accidental credential commits, and the absence of local vaults for edge nodes and IoT devices. Developers can store and retrieve secrets with a simple set/get API, with all data remaining encrypted at rest and decryptable only on the original authorized host. The project is available on GitHub and PyPI under the handle wisrovi.