Best practice prompting for password

[GiBo]

Hi,

what's the best practice to securely prompt user for password on console
in Python? IIRC some programs like SSH do a lot to ensure that the input
comes from TTY and is not redirected from somewhere and several other
checks. In the case of OpenSSH even the password prompt is always
displayed regardless if the output is redirected to a file or not.

Any pointers to best practice or code snippet of python password prompt?

Thanks

Gibo

 

[Lawrence D'Oliveiro]

what's the best practice to securely prompt user for password on console
in Python? IIRC some programs like SSH do a lot to ensure that the input
comes from TTY and is not redirected from somewhere and several other
checks.

Does it? Why bother?

It's not where the password comes _from_ that you have to be careful about,
it's what you do with it after you get it.