SecureVault: an offline password manager
A password manager that keeps everything in one encrypted file on your own disk: no cloud, no telemetry, one runtime dependency. Version 2 is a ground-up rewrite that followed a security audit of my own first version.
- Argon2id calibrated per machine, a random vault key, and AES-256-GCM over all data, so even site names stay encrypted
- Tamper-evident file format with a written specification and threat model
- Clipboard auto-clear kept out of Windows clipboard history, TOTP codes, password-health audit
- CLI and desktop app; 300+ tests, including official RFC test vectors and bit-flip property tests