SCPS: Secure Cloud Password Splitter

Abstract

Existing password managers rely on a single master password to protect all of a user’s stored passwords. Using one password is both insecure and inconvenient. If this password is forgotten, it cannot be reset because the master password is used to encrypt the password database. Our password manager, Secure Cloud Password Splitter (SCPS), does not require a master password and instead generates an encryption key that is stored on the user’s cloud storage services using secret sharing. The user’s passwords are therefore protected by the authentication for each cloud storage service. A prototype of SCPS is implemented as a Google Chrome Extension, and both performance analysis and user testing are conducted on this prototype. Pricing analysis and valuation for SCPS are also performed, and SCPS is ultimately valued at $64.6 million.