Your passwords. Your keys. Your control. No trust required.
In 2022, LastPass was breached. 30 million encrypted vaults were stolen. While the passwords were encrypted, users with weak master passwords were at risk. The fundamental issue? Centralized servers are single points of failure.
Traditional password managers require you to trust a company with your encrypted data. What if you didn't have to?
HideMyPass is the first truly decentralized password manager. Your encrypted vault lives on IPFS, your vault reference lives on Solana blockchain, and only you hold the keys.
🔑 Zero-Knowledge → We can't see your passwords. Ever.
🌐 Decentralized → No servers. No company. Just blockchain.
⚡ 99% Cheaper → Light Protocol ZK Compression
🛡️ Military-Grade → AES-256-GCM + 600k PBKDF2
Your wallet signature derives encryption keys. Keys never leave your browser. We couldn't access your passwords even if we wanted to.
- Encrypted vault → IPFS (Pinata)
- Vault reference → Solana (Light Protocol ZK Compression)
- No servers, no databases, no company to trust
- Vault Encryption: AES-256-GCM (300k PBKDF2)
- CID Encryption: On-chain privacy (300k PBKDF2)
- Per-Password Encryption: Unique key per password
Traditional Solana: $0.20 per vault
Light Protocol: $0.002 per vault
Your annual cost: ~$0.02 🤯
# Clone
git clone https://github.com/yourusername/hidemypass
cd hidemypass
# Install
npm install
# Configure
cp .env.example .env.local
# Add your API keys to .env.local
# Run
npm run dev- Connect Wallet (Phantom/Solflare on Devnet)
- Sign Message to derive encryption key
- Add Password → Encrypted locally
- Save → Upload to IPFS + Create on-chain reference
- Done! Your vault is now on the blockchain
┌─────────────┐
│ Browser │ Your passwords encrypted here
│ AES-256 │ Keys derived from wallet signature
└──────┬──────┘
│
│ Encrypted Data
▼
┌─────────────┐
│ IPFS │ Encrypted vault stored
│ (Pinata) │ CID: QmX5TtZ...
└──────┬──────┘
│
│ CID (encrypted)
▼
┌─────────────┐
│ Solana │ Vault reference on-chain
│Light Protocol│ ZK Compressed (99% cheaper)
└─────────────┘
Flow:
- Sign with wallet → Derive encryption key
- Encrypt passwords → AES-256-GCM
- Upload to IPFS → Get CID
- Encrypt CID → Privacy protection
- Store on Solana → Light Protocol compression
- Transaction done → $0.002 total cost
AES-256-GCM + PBKDF2 (300,000 iterations)
Key derived from: wallet.signMessage()CID encrypted before storing on Solana
Observers see: gibberish, not your IPFS locationEach password: unique encryption key
Even if vault decrypted: passwords still encrypted| Attack Vector | Defense |
|---|---|
| Brute Force | 600k PBKDF2 iterations = years to crack single password |
| Server Hack | No servers to hack 🎯 |
| Database Leak | No database exists 🎯 |
| Company Breach | Decentralized, no company holds data 🎯 |
| Quantum Computer | AES-256 remains secure (NIST approved) |
- Next.js 14 - React framework
- TypeScript - Type safety
- Tailwind CSS - Styling
- Solana Wallet Adapter - Wallet integration
- Solana - Fast, cheap blockchain
- Light Protocol - ZK Compression (99% cost reduction)
- Helius RPC - ZK proof generation
- Web3.js - Solana interaction
- IPFS (Pinata) - Decentralized storage
- Web Crypto API - AES-256-GCM encryption
- PBKDF2 - Key derivation (600k iterations)
| HideMyPass | LastPass | 1Password | Bitwarden | |
|---|---|---|---|---|
| Decentralized | ✅ | ❌ | ❌ | |
| Zero-Knowledge | ✅ Wallet-based | |||
| Annual Cost | $0.02 | $36 | $36-120 | $10-40 |
| Server Breach Risk | 0% (no servers) | High (2022) | Medium | Medium |
| Open Source | ✅ Fully | ❌ | ✅ | |
| Blockchain | ✅ Solana | ❌ | ❌ | ❌ |
Your wallet is already your master key. Why use a separate master password? Use what you already have.
No company. No servers. No trust required. Just math and blockchain.
Open source. Reusable patterns. Learn how to build zero-knowledge apps on Solana.
Tired of $36/year subscriptions? Pay $0.02/year instead. That's 1800x cheaper.
- ✅ Zero-knowledge encryption
- ✅ Light Protocol integration
- ✅ IPFS storage
- ✅ Solana Devnet
- Mainnet deployment
- Browser extension
- Mobile app (React Native)
- Password generator
- Secure password sharing
- Team vaults
- Hardware wallet support (Ledger)
- Multi-device sync
We welcome contributions! Here's how:
- Fork the repo
- Create a feature branch (
git checkout -b feature/amazing) - Commit your changes (
git commit -m 'Add amazing feature') - Push to branch (
git push origin feature/amazing) - Open a Pull Request
npm run dev # Start dev server
npm run build # Build for production
npm run lint # Lint codeMIT License - see LICENSE file
Built with:
- Light Protocol - ZK Compression on Solana
- Helius - Solana RPC & ZK proof generation
- Pinata - IPFS pinning service
- Solana - Fast, cheap blockchain
- Issues: GitHub Issues
- Docs: See LIGHT_PROTOCOL_INTEGRATION.md
- Demo: Live Demo (after
npm run dev)
This is experimental software. Use at your own risk. Always keep backups of your seed phrase. We are not responsible for lost funds or data.
Alpha software: Test thoroughly before using with real passwords.
Made with ❤️ for Solana Privacy Hack