# US 10,769,265 B2 · Managing passwords using steganography > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,769,265 B2 - Document ID: US10769265B2 - Status: Granted - Kind: B2 - Application number: 16/409,803 - Filed: 2019-05-11 - Published: 2019-08-29 - Granted: 2020-09-08 - Earliest claimed: 2016-12-02 - Assignees: International Business Machines Corporation - Applicants: International Business Machines Corporation - Inventors: Elizabeth M. Daly; Martin J. Stephenson - Web page: https://patentgrep.com/patent/US10769265B2 ## CPC - G06F 21/36: by graphic or iconic representation - G06T 1/0021: {Image watermarking} - H04L 63/0428: {wherein the data content is protected, e.g. by encrypting or encapsulating the payload} - H04N 7/183: {for receiving images from a single remote source} - H04W 12/068: {using credential vaults, e.g. password manager applications or one time password [OTP] applications} - H04N 7/185: {from a mobile camera, e.g. for remote control} - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - G06T: IMAGE DATA PROCESSING OR GENERATION, IN GENERAL - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04N: PICTORIAL COMMUNICATION, e.g. TELEVISION - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract A computer system, method, and computer readable product are provided for managing passwords using steganography. In various embodiments, a computing system provides a password manager that a user provides a password to. The user then selects a service for which credentials will be generated or stored, and an image on the user's device that will be used to steganographically store the credentials. The computing system then generates a steganographic image that includes the credentials and stores that image with the other images on the user's device. ## Claims ### Claim 1 A computer-implemented method for managing passwords using steganography, the method comprising: receiving a master password for a password manager; encrypting the master password; determining whether the master password is valid by comparing the encrypted master password with a stored encrypted master password; upon determining that the master password is valid, displaying a plurality of images that are stored in a computer memory; receiving user input indicative of selecting a first image of the plurality of images; receiving an indication of a computer service for which a first password is to be stored; encrypting the first password; receiving an indication of the encrypted first password; generating a steganographic image based on the first image and the indication of the encrypted first password; and replacing the first image with the steganographic image in the plurality of images stored in the computer memory. ### Claim 2 (depends on 1) The computer-implemented method of claim 1, further comprising: receiving the master password for the password manager a second time; determining whether the master password is valid a second time; after determining that the master password is valid a second time, displaying the plurality of images; receiving a second indication of the computer service; receiving user input indicative of selecting the first image of the plurality of images; extracting the first password from the steganographic image; and providing the extracted first password as a credential to the computer service. ### Claim 3 (depends on 1) The computer-implemented method of claim 1, further comprising: omitting an image that is preloaded on a computing device from the plurality of images that are displayed. ### Claim 4 (depends on 1) The computer-implemented method of claim 1, wherein at least one image of the plurality of images is captured with a camera of a computing device that includes the computer memory. ### Claim 5 (depends on 1) The computer-implemented method of claim 1, further comprising: receiving an indication of a first user name; and generating the steganographic image further based on the first image, the indication of the first password, and the indication of the first user name. ### Claim 6 (depends on 1) The computer-implemented method of claim 1, further comprising: generating the steganographic image further based on the first image, the indication of the first password, and the indication of the computer service. ### Claim 7 A computer system configured to manage passwords using steganography, comprising: a processor, a computer-readable memory, a computer-readable tangible storage device, and program instructions stored on the storage device for execution by the processor via the memory, wherein execution of the program instructions by the computer system configures the computer system to: log into a password manager; receive a master password; compare an encryption of the master password with a stored encrypted master password; display a plurality of images based on the comparison; receive user input indicative of selecting a first image of the plurality of images; encrypt a first password; receive an indication of the encrypted first password; generate a steganographic image based on the first image and the indication of the encrypted first password; and store the steganographic image in place of the first image in a computer memory. ### Claim 8 (depends on 7) The computer system of claim 7, wherein execution of the program instructions further configures the computer system to: in response to receiving a request to access passwords, display the plurality of images; receive user input indicative of selecting the first image of the plurality of images; and extract the first password from the steganographic image. ### Claim 9 (depends on 8) The computer system of claim 8, wherein execution of the program instructions further configures the computer system to: receive an indication of a computer service; and verify that the extracted first password corresponds to the computer service. ### Claim 10 (depends on 9) The computer system of claim 9, wherein execution of the program instructions further configures the computer system to: provide the extracted first password as a credential to the computer service. ### Claim 11 (depends on 8) The computer system of claim 8, wherein execution of the program instructions further configures the computer system to: log into the password manager in response to receiving a valid password for the password manager. ### Claim 12 (depends on 8) The computer system of claim 8, wherein execution of the program instructions further configures the computer system to: receive an indication of a first user name; and generate the steganographic image further based on the first image, the indication of the first password, and the indication of the first user name. ### Claim 13 (depends on 8) The computer system of claim 8, wherein execution of the program instructions further configures the computer system to: generate the steganographic image further based on the first image, the indication of the first password, and the indication of a computer service. ### Claim 14 A computer program product, comprising: a computer readable storage medium having programming instructions embodied therewith, the programming instructions executable by a computer cause the computer to: log into a password manager; receive a master password; compare an encryption of the master password with a stored encrypted master password; display a plurality of images based on the comparison; receive user input indicative of selecting a first image of the plurality of images; encrypt a first password; receive an indication of the encrypted first password; generate a steganographic image based on the first image and the indication of the encrypted first password; and store the steganographic image in place of the first image in a computer memory. ### Claim 15 (depends on 14) The computer program product of claim 14, wherein the programming instructions executable by the computer further cause the computer to: in response to receiving a request to access passwords, display the plurality of images; receive user input indicative of selecting the first image of the plurality of images; and extract the first password from the steganographic image. ### Claim 16 (depends on 14) The computer program product of claim 14, wherein the programming instructions executable by the computer further cause the computer to: receive an indication of a computer service; and verify that an extracted password corresponds to the computer service. ### Claim 17 (depends on 14) The computer program product of claim 14, wherein the programming instructions executable by the computer further cause the computer to: omit an image that is preloaded on the computer from the plurality of images that are displayed. ### Claim 18 (depends on 14) The computer program product of claim 14, wherein at least one image of the plurality of images has been captured with a camera of the computer. ### Claim 19 (depends on 1) The computer-implemented method of claim 1, wherein replacing the first image with the steganographic image in the plurality of images stored in the computer memory inhibits a malicious user from noticing a similarity between the first image and the steganographic image.