Introducing SafePass
Why we are building another password manager, what already works and what is left before the first release.
SafePass is a password manager whose sync server cannot read your data. Every entry is encrypted on your device before it is sent, and account sign-in uses the OPAQUE protocol, so your master password never leaves the device.
What already works
- A Linux app built with Flutter: create, search and edit encrypted entries, generate passwords, change the master password and recover access with a 24-word phrase. The local database is SQLCipher, with its key kept in the operating system’s secure storage.
- A Chrome and Firefox extension with its own encrypted vault, sync, form filling only on a site whose address matches exactly, and saving a login from a page after you confirm.
- A sync server on ASP.NET Core and PostgreSQL: OPAQUE sign-in, storage of encrypted revisions, and account password reset signed with the recovery phrase.
- Sync that loses nothing: offline changes wait in a queue, and concurrent edits are both kept until you choose one.
What is left before release
Builds for Windows, macOS, Android and iOS already compile but are still being tested on real devices. Ahead are release signing, a production server rollout and, most importantly, an external security audit.
Until that audit is done, use SafePass with test data only. We will post here when that changes.
How protection works
To dig into the details, start with the Security page, then read the threat model and the encryption formats.