Using Google Authenticator and HashiCorp Vault to Build a Security System to Boost Digital Wallet Security and Recovery Secrets

This paper presents a system designed to enhance and extend the security architecture of digital wallets by integrating HashiCorp Vault (HV) and Google Authenticator (GA) technologies with Amazon Web Services (AWS). GA is used as a mechanism to strengthen digital wallet security by protecting encryption keys and passwords from attackers. Access rights management is implemented in HV using AWS Identity and Access Management (IAM) capabilities, in addition to HV’s own encryption and secret management capabilities. By synchronizing these technologies, we create a comprehensive security system capable of mitigating the risk of unauthorized access to digital wallets and recovering encrypted and stored statements, while simultaneously restricting access to them. The results, based on the performance of the designed system, demonstrate the benefits of rapid response. When testing a database of 5,000 entries, we found that the recovery and storage processes were 100% successful. Running the Python code using Python3 entropy_test.py resulted in a quality mark of 97.02% with a Shannon entropy of 3.2914 bits, plus an achievable maximum mark of 3.3926 bits, indicating that the data generation process is random and reliable within the limits of a robust and reliable system.