vaults
- 0 ratings
Password manager featuring client side AES-256 encryption, PBKDF2 hashing, vaults, password generation & more.
Deploy this app to Linode with a free $100 credit!
vaults is a password manager featuring client side AES-256 encryption, PBKDF2 hashing, vaults, password generation & more.
If you want to self-host, download the latest release and follow the installation steps here.
This application consists of multiple parts:
A "vault" is a collection of multiple items(or entities, more on them below). It is the highest unit to save items in & must have a name & description. Users can use it to differentiate between personal items, work related items, family, games etc.
A "category" is used to group items inside a vault. It must have a name and there can be any amount of them in each vault.
The "login" represents an online account. It contains the following fields:
A "note" can be freely used for whatever else and serves as a blueprint for other items the user might have a need for, such as Wi-Fi passwords, membership cards, SSH keys, and much more. These are the fields of the note:
The front end has a wide range of responsibilities such as: - entity modeling, - creation of the user encryption key based on the master password & using the email as a salt, - 100100 iterations of PBKDF2 - creation of the authentication hash based on the master password & using the encryption key as a salt, - 1 extra iteration of PBKDF2 - encrypting the data before sending it off to the backend, - AES-256 in CBC mode - decrypting the data after a successful request using the encryption key - managing the data reactively and globally using state management - being a single page application/UI - offering a mobile first design experience
The back end has the following responsibilities:
This project runs completely on Docker, be it the back end, front end, server hosting(NGINX) & database. Docker Compose is used for orchestration.
Explanation of the security model:
The user registers using a master password, which is firstly hashed into an encryption key using the unique email address as a salt. The master password is then used to create an authentication hash using the encryption key as a salt; the authentication hash is the value that gets sent to the back end for it to be hashed again using a randomly generated salt, and which will eventually be the value the user authenticates against.
The vault and every other data inside gets encrypted with the mentioned encryption key before doing any operation and sending to the backend. On successful requests the vault will then be decrypted by the front end.
If you want to get involved please refer to the contributors' documentation.
Please login to review this project.
No reviews for this project yet.
Password manager with webapp, browser extension, and mobile…
Lightweight Bitwarden server API implementation written in …
Password manager dedicated for managing passwords in a coll…
Comments (0)
Please login to join the discussion on this project.