
I built a zero-knowledge encrypted secrets manager as a solo developer — launching next week
Hey IH! I'm Ali, a solo developer, and I just finished building CryptVault — an end-to-end encrypted secrets manager where no one (not even me) can access your data. Why I built this I've been using password managers for years, but something always bothered me: Most popular ones had data breaches (LastPass, anyone?) The "trust us, your data is safe" model felt wrong Affordable options were either too basic or not truly encrypted None of them let me control where my encrypted data is stored So I decided to build one myself — with zero-knowledge architecture from day one. The server never sees your plaintext data. Period. The tech behind it This was the most fun (and challenging) part: RSA-4096 for key wrapping — each user gets a unique keypair AES-256-GCM for encrypting actual secrets — fast and authenticated Argon2id for key derivation from your Master Password — resistant to GPU/ASIC attacks Two-layer authentication : Account login (email + password → JWT) and Vault unlock (Master Pas
Continue reading on Dev.to Webdev
Opens in a new tab

