CALL US

  +91 8266041801

  +44 203 372 4609

  +1 408 454 6110

  evontech

Get Free Quote

Python 3.6 adds New secrets Module for Robust Account and Password Security

python-ev.png

Python 3.6, the newest major release of the Python language, has added a new module, called secrets, to help generate cryptographically strong random numbers for managing secrets, like account authentication, tokens and related secrets. Python developers are highly likely to prefer secrets over the default pseudo-random number generator in the random module, since it’s not meant for cryptography or security, but modelling and simulation.

Let’s understand with an example how one can create their own cryptographically strong pseudo-random values and generate tokens using the secrets module.

How to create Cryptographically Strong Pseudo-Random Values using secrets

>>> import secrets
>>> import string
>>> characters = string.ascii_letters + string.digits
>>> secure_password = ''.join(secrets.choice(chNo Records.aracters) for i in range(10))
>>> secure_password
'SRvM54ZAs1'

The first step is to import the secrets and the string modules. Then we create a string of uppercase letters and integers. Now, in order to choose characters randomly to generate a secure password, we need to use the secrets module’s choice() method. The reason it’s being called a secure password is because there’s been a use of mixed case, numbers and symbols in the password, which is highly advised to people to keep their passwords protected from hack attacks.

How to Generate Tokens using secrets

There is not one but several methods to generate tokens using the secrets module. Below are mentioned some examples to ease your learning on token generation using secrets.

>>>: secrets.token_bytes()
b'\xd1Od\xe0\xe4\xf8Rn\xf4G\xdb\x08\xa8\x85\xeb\xba>\x8cO\xa7XV\x1cb\xd6\x11\xa0\xcaK'

>>> secrets.token_bytes(8)
b'\xfc,9y\xbe]\x0e\xfb'

>>> secrets.token_hex(16)
'6cf3baf51c12ebfcbe26d08b6bbe1ac0'

>>> secrets.token_urlsafe(16)
'5t_jLGlV8yp2Q5tolvBesQ'

The token_bytes function here allows to return a random byte string containing nbytes number of bytes. A reasonable default could also be put into use when nbytes is None or not supplied. In the first example, there is no mention of number of bytes, hence Python itself choose a reasonable number there. The token-bytes function was used again, but this time with 8 bytes. The next function used was token_hex, to return a random text string, in hexadecimal. The token_urlsafe function is the last one used there, meant to return a random URL-safe text string. Base64 encoding was also used for text.

Click here to unveil 7 Python libraries to use in 2017

How Many Bytes to Use for Tokens?

You should have sufficient randomness for your tokens to secure them against brute-force attacks. It’s advised that at least 32 bytes (256 bits) of randomness should be used to protect tokens from security breaches.

The Python developer community will see the secrets module as an important addition to Python 3.6. With secrets, Python 3.6 developers now have a reliable way to generate cryptographically strong tokens and passwords.

What’s your view on addition of secrets to Python 3.6? Would you like to give the secrets module a try for generating tokens and passwords? Please share your views in the comment box below.

Source 1: http://www.blog.pythonlibrary.org/

Source 2: https://docs.python.org 


Why to Use HTML5 and CSS3 for Your Business?
Why Do Developers Now Compare Vue.js to JavaScript...

Comments

 
No comments yet
Already Registered? Login Here
Guest
Wednesday, 25 November 2020
If you'd like to register, please fill in the username, password and name fields.

SEARCH BLOG

salesforce offshore software development CRM offshore software development company development Cloud computing software Java Big Data Analytics business apps mobile app development cloud C++ Big Data outsourcing web development app development J2ee mobile app development company IT consulting and software development IT developers Project Management software development Offshore development India Javascript Salesforce customization Progressive Web Apps developer Web app development QA Android development Software development and testing Offshore development Salesforce Cloud Services Salesforce consulting Product Development Salesforce Mobile Development Node.js MVP Development Offshore software development services Agile Development project management methodology testing EmployeeEngagement Agile product Development consultant digital marketing services QA and Testing business analysts digital marketing services india automation Salesforce development risk management Social Media Marketing startups Salesforce Lightning enterprise Evon Technologies web iOS apps Salesforce CRM Joomla developers software development outsourcing Python data security Salesforce cloud AI in mobile apps Virtual reality Popular CMS c++ language consulting data protection salesforce implementation Scrum mobile app testing Artificial intelligence Staff Augmentation Recreationalactivity c++ programming Start-ups Business continuity Salesforce AppExchange Big Data Cloud Database & Computing | AppExchange QA services Business Growth time tracking MVP software Project Manager Salesforce ISV Web application app development company developers blockchain Big data and lead generation task management Android app development outsourcing Android apps partner

About Us

Evon is a Software Consultancy based in India. We are a 250+ people company. We primarily service clients who want to either completely outsource a new idea or are looking to build an offshore team

Recent Tweets

Evon Technologies

What is #Salesforce #OEM and how partnering with #Evon can help you save costs and headaches of licensing it? Know… https://t.co/SsvSBLds8m

Evon Technologies

Thank you so much @Develop4u_co to select @Evontech as a Top #GameApp Development Companies. https://t.co/9qMTDYUPfe

Get in Touch

  +91 8266041801

  +44 203 372 4609

  +1 408 454 6110

  evontech

 This email address is being protected from spambots. You need JavaScript enabled to view it.

   A- 5, IT Park, Dehradun, Uttarakhand, India, PIN - 248001.

follow us on

×
We use cookies on our website to provide you with a more personalised digital experience and for analytics related to our website and other media. For more information, please review our Privacy Policy and Cookies Policy.