TaidyPass
An open-source, zero-knowledge password manager — not even the server can read your passwords.
Overview
An open-source password manager built on a zero-knowledge architecture: all encryption and decryption happens in the browser, and the server only ever holds ciphertext it cannot read. Supports multiple devices, keyring grouping and tags.
Why it was needed
With most password managers, a stolen account still leaks everything you stored. I wanted something safer, so I built it myself — and used it to put a zero-knowledge architecture into practice.
My role
Architecture, front end, back end and the encryption design were all done by me, and released as open source.
Technical challenge
Turning "secure" from a slogan into real engineering decisions: how keys are generated, how they're kept, what happens when a user forgets one — every answer is a trade-off.
Implementation
Encryption and decryption run client-side only, using the industry-standard SHA-256. Custom keyrings generate their own key, shown exactly once — only the key holder can open them, so a server breach still exposes nothing.
Engineering decisions
Client-side encryption first
All sensitive computation happens in the browser, leaving the server with zero knowledge of the user's passwords.
The trade-off of independent keys
A custom keyring's key is shown only once. That's more secure, at the cost of the user having to keep it safe — a deliberate design trade-off.
Result
Live, and a tool I use every day myself — still maintained and patched.
Details
Zero-knowledge architecture
The default keyring is encrypted with the user's own login credentials, and the whole encryption flow stays on the client. Even if the server is breached, the data remains safe.
SHA-256, an industry standard
The industry-standard SHA-256 algorithm secures the data both in transit and at rest.
Independent keys for custom keyrings
Creating a custom keyring generates a dedicated key, shown exactly once — only whoever holds it can open that data.
Seamless across devices
Log in from as many devices as you like and reach your passwords securely, anywhere.