← Projects
Envault
Full Stack & SecurityCompleted
Local-first, end-to-end encrypted desktop credential vault for storing API keys, .env files, logins, bank accounts, WiFi, documents, and health data fully offline.
Gallery (8)
Details
- —Fully encrypted SQLite database via SQLCipher with Argon2id key derivation and a stable wrapped master key
- —Three recovery keys that re-wrap the master key on passphrase rotation instead of re-encrypting the database
- —Optional serverless per-device sync with row-level last-write-wins merge, tombstones, and conflict preservation
- —Out-of-band encrypted attachments using XChaCha20-Poly1305, HKDF-derived keys, HMAC filenames, and content-hash references
- —Dev workspace with typed credentials, prod/dev environments, cross-project references, and one-click .env block copy
- —Personal section organized by life domain covering identity, banking, credentials, WiFi, and 2FA recovery codes
- —Health module with emergency card, weight time-series charts, coverage, vaccines, and consultations
- —Identity documents that live-inherit holder data into banking and personal entries
- —Role-derived masking, on-demand WiFi QR generation, expiry notifications, and offline printable PDF backups
- —Auto-lock on inactivity, global instant search, and zero network with strict CSP and no telemetry