Back to projects
Personal / security R&D project
Secure Password Manager
A password vault where even a database leak reveals nothing.
Overview
A centralised password vault where confidentiality is never negotiable: every secret is encrypted with AES-256-GCM before storage, so a database leak reveals nothing. Access is locked behind a strong password (Argon2id) and TOTP 2FA, with an advanced generator, a security dashboard and an audit trail of sensitive actions.
Key features
- AES-256-GCM envelope encryption, versioned master key, never exposed to the client
- Strong authentication: Argon2id + TOTP 2FA, revocable sessions and devices
- Advanced generator, instant search and a security dashboard
- Rate-limiting, anti-brute-force and an audit trail of sensitive actions
Under the hood
- Front-end
- View, enter and search credentials — without ever holding the keys.
- Back-end
- An encryption boundary: nothing reaches the store in clear.
- Database
- Holds only encrypted data, useless if the database leaks.
In pictures
Next project