
Secure password manager web app
Why Choose This Project
With increasing online accounts and password leaks, users often struggle with managing strong, unique passwords securely. This project offers a practical and sellable solution—a personal password manager that uses strong encryption to store and retrieve credentials safely. It’s in demand across enterprises, developers, and tech-savvy individuals looking to improve their digital hygiene.
What You Get in This Project
A secure, user-friendly web app that allows users to store, manage, generate, and retrieve passwords. The app uses encryption (AES-256 or Argon2 + bcrypt) to store passwords securely in the backend and never exposes raw credentials.
Technology Stack
Layer | Technologies Used |
---|---|
Frontend | HTML, CSS, Bootstrap, JavaScript, jQuery, React (optional) |
Backend | Node.js + Express / Java Spring Boot / Python Flask |
Database | MongoDB / MySQL / PostgreSQL (with encryption at rest) |
Encryption | AES-256, bcrypt, Argon2, PBKDF2 |
Authentication | JWT / OAuth2 / Spring Security |
Optional APIs | HaveIBeenPwned API for breach detection |
How It Works
-
User Registration/Login
User registers with a master password, which is never stored—only a hash is stored securely using bcrypt or Argon2. -
Password Vault Dashboard
After logging in, the user accesses a dashboard to manage all stored credentials. -
Add New Credentials
The user can add site name, username, and password. The password is encrypted on the client or server using AES before storage. -
Password Generator
A built-in strong password generator allows users to create complex passwords with custom rules (symbols, length, etc.). -
Search and Auto-fill
Stored credentials can be searched by site or username, and optionally auto-filled in the browser via browser extension. -
Decryption on Demand
Passwords are decrypted only when needed and never stored in plaintext. -
Logout and Session Timeout
Secure logout clears all session tokens and local data. Inactivity leads to auto logout.
Key Features
Feature | Description |
---|---|
Master Password Protection | All data is protected via a master password that is hashed, not stored |
Strong Encryption | AES-256 encryption for all stored passwords |
Secure Storage | Encrypted passwords stored in DB, optionally with encrypted DB fields |
Password Generator | Generates secure, random passwords with customizable parameters |
Breach Check API | Optional integration to check if an email/password has appeared in leaks |
Copy to Clipboard | Easy "Copy Password" button with auto-clear after few seconds |
Session Timeout | Auto logout after inactivity to protect access |
Responsive UI | Works on both desktop and mobile devices |
Optional Browser Extension | For autofill and quick access to vault |