Secure Password Vault - Zero-Knowledge Client-Side Password Manager

Secure Password Vault

A zero-knowledge password manager that runs entirely in your browser. Your master key never leaves your device.

Zero-Knowledge Architecture

Unlock Your Vault

Enter your master key to access your saved passwords. This key is used to derive the encryption key and is never stored.

Minimum 8 characters. Your key derives a strong encryption key using scrypt KDF.

Zero-Knowledge Security Architecture

This password vault is designed with privacy and security as the highest priority. Your data never leaves your browser unencrypted.

AES-256-GCM Encryption

Military-grade authenticated encryption protects your passwords with 256-bit keys.

Scrypt Key Derivation

Memory-hard KDF makes brute-force attacks computationally infeasible.

100% Client-Side

All encryption and decryption happens in your browser. Nothing is sent to any server.

Zero Knowledge

We never see, store, or have access to your master key or passwords.

How It Works

// 1. Derive encryption key from master key using scrypt const salt = crypto.getRandomValues(new Uint8Array(32)); const derivedKey = await scrypt(masterKey, salt, 2^14, 8, 1, 32); // 2. Encrypt each password with AES-256-GCM const iv = crypto.getRandomValues(new Uint8Array(12)); const encrypted = await crypto.subtle.encrypt( { name: 'AES-GCM', iv }, derivedKey, passwordData ); // 3. Store only encrypted data in localStorage

Scrypt Parameters

This vault uses secure scrypt parameters for key derivation:

Try other encryption, hashing, and signing utilities.