A next-generation, end-to-end encrypted password manager with zero-knowledge architecture and advanced security features.
- Overview
- Key Features
- Technology Stack
- System Architecture
- Installation Guide
- Usage Instructions
- API Documentation
- Configuration
- Troubleshooting
- Contributing
- License
- Acknowledgments
- Support
CypherVault is a modern password manager designed for maximum security and privacy. Built with a zero-knowledge architecture, all encryption and decryption happen on your device—your secrets never leave your hands. CypherVault leverages strong cryptography, multi-factor authentication, and a beautiful, responsive UI to keep your digital life safe and convenient.
- Individuals: Securely manage personal credentials
- Teams: Share secrets safely with advanced access controls
- Security-Conscious Users: For those who demand the highest standards in privacy
- Zero-Knowledge Encryption: All encryption/decryption is client-side; your keys and passwords never leave your device.
- AES-256-GCM Encryption: Industry-standard, authenticated encryption for all secrets.
- PBKDF2-HMAC-SHA256: Strong key derivation with 310,000+ iterations.
- Per-Entry Encryption: Each password entry is uniquely encrypted with its own salt and IV.
- Secure Storage: All sensitive data is encrypted before being stored in Firebase.
- Content Security Policy (CSP): Strict CSP headers block inline scripts and restrict content to trusted sources.
- Two-Factor Authentication (2FA): TOTP-based 2FA for robust account protection.
- Automatic Vault Locking: Auto-locks after inactivity to prevent unauthorized access.
- Reauthentication for Sensitive Actions: Password verification required for critical operations.
- Memory Sanitization: Sensitive data is wiped from memory when not needed.
- Password Strength Meter: Real-time feedback using zxcvbn entropy analysis.
- Security Audit Logs: Track all security events with searchable history.
- WebAuthn/FIDO2: Hardware-backed, phishing-resistant authentication.
- Clipboard Auto-Clear: Sensitive data is cleared from clipboard after a timeout.
- Stealth Mode & Panic Key: Instantly hide sensitive info and lock vault with a panic keystroke.
- Session Integrity Verification: Protects against session tampering.
- Device Fingerprinting: Restrict access to trusted devices.
- Decoy Vault: Fake credentials for coercion scenarios.
- Password Breach Checking: Zero-knowledge checks against Have I Been Pwned.
- Responsive Web UI: Works beautifully on desktop and mobile
- Dark/Light Mode: Seamless theme switching
- Password Generator: Create strong, unique passwords
- Secure Sharing: Share credentials safely
- Comprehensive Security Center: All your security controls in one place
- React 18: Modern UI framework
- TypeScript: Type-safe development
- Tailwind CSS: Utility-first styling
- Firebase: Authentication, Firestore, Hosting
- Web Crypto API: Client-side cryptography
- zxcvbn: Password strength estimation
- TOTP: Two-factor authentication
- Have I Been Pwned API: Breach checking
graph TB
A(User Device) --> B(CypherVault Web App)
B --> C(Web Crypto API)
B --> D(Firebase Auth)
B --> E(Firestore - Encrypted Data)
B --> F(TOTP/2FA)
B --> G(Security Center)
C --> H(AES-256-GCM Encryption)
D --> I(Authentication)
E --> J(Zero-Knowledge Storage)
F --> K(Authenticator Apps)
G --> L(Audit Logs)
G --> M(Stealth Mode)
git clone https://github.com/aadii-chavan/CypherVault.git
cd CypherVaultCopy the example environment file and update with your Firebase config:
cp .env.example .envEdit .env with your Firebase project settings.
npm install
# or
yarn installnpm run dev
# or
yarn devThe app will be available at http://localhost:5173 (default).
- Sign Up / Log In: Create an account or log in with your credentials.
- Set Your Password: Your vault key is derived from your account password.
- Add Passwords: Store, edit, and organize your credentials securely.
- Enable 2FA: Add an extra layer of security with TOTP.
- Use Security Center: Monitor audit logs, check for breaches, and manage trusted devices.
- Lock/Unlock Vault: Vault auto-locks after inactivity; unlock with your password.
CypherVault is primarily a client-side app, but exposes limited API endpoints for advanced features.
https://cypher-vault-project.web.app/api
Check password strength and breach status.
Rate limiting for sensitive operations.
- All configuration is managed via
.envand Firebase Console. - Update
.envfor custom settings (see.env.example).
Example .env:
VITE_FIREBASE_API_KEY=your_api_key
VITE_FIREBASE_AUTH_DOMAIN=your_auth_domain
VITE_FIREBASE_PROJECT_ID=your_project_id
VITE_FIREBASE_STORAGE_BUCKET=your_storage_bucket
VITE_FIREBASE_MESSAGING_SENDER_ID=your_sender_id
VITE_FIREBASE_APP_ID=your_app_id- Login Problems: Check Firebase config and internet connection.
- Vault Not Unlocking: Ensure correct password; reset if forgotten.
- 2FA Issues: Sync device time; re-scan QR if needed.
- Deployment Errors: Check Firebase CLI and permissions.
- Use browser dev tools for client-side errors.
- Check Firebase Console for backend/auth issues.
We welcome contributions! Please fork the repo, create a feature branch, and submit a pull request. See CONTRIBUTING.md for details.
This project is licensed under the MIT License - see the LICENSE file for details.
- Firebase Team: For secure backend infrastructure
- React Community: For the robust UI framework
- OWASP: For security best practices
- zxcvbn: For password strength estimation
- Have I Been Pwned: For breach checking API
For support, questions, or feature requests:
- GitHub Issues: Create an issue
- Documentation: Check this README and inline code comments
- Community: Join discussions in the GitHub repository
CypherVault - Your Security, Your Control
Protect your digital life with confidence.
