Passave is a modern, secure, cross-platform password manager built with a vault-first, zero-knowledge architecture.
It helps users generate, store, and manage credentials securely across devices - without ever exposing secrets to the server.
End-to-end encrypted password management with keys known only to you.
- 🔒 Zero-Knowledge Encryption - Server never sees your passwords
- 🧠 Vault-First Architecture - Security before accounts
- 🔑 Master Password + Recovery Key - No fake resets, real safety
- 📱 Multi-Device Sync - Encrypted vault sync via cloud
- ⚡ Autofill Support - Across apps and websites
- 🔁 KeePass Compatible - Import & export supported
- 🧬 Configurable Security Levels - Encryption strength per credential
- 🌙 Premium Dark UI - Clean, calm, security-first design
Passave is built on a true zero-knowledge model:
-
🔐 Master Password
- Encrypts and decrypts the vault
- Never stored or sent to the server
-
🗝 Recovery Key
- Generated once during vault creation
- Can recover the vault if the master password is forgotten
- Must be saved by the user (Passave cannot recover it)
-
📲 Trusted Device Reset
- If at least one device is unlocked and trusted
- User can reset master password and re-encrypt vault
-
🔍 Server Role
- Stores only encrypted vault blobs
- Cannot read or decrypt user data
- Sync ≠ recovery
If both master password and recovery key are lost and no trusted device exists, the vault is unrecoverable - by design.
- Store usernames, passwords, URLs, notes
- Strong password generator
- Password strength analysis
- Copy & reveal controls
- Secure notes support
Each credential can be assigned a security tier:
- Low / Medium / High
- Encryption strategy varies per level
- Designed for flexibility and performance balance
- Encrypted multi-device sync
- Offline-first access
- Secure local caching
- Encrypted backups & restore
- System Autofill API integration
- App & browser login detection
- Credential suggestions with user consent
- Save new credentials after login/signup
- Import from KeePass databases
- Export encrypted vaults
- Open standards support
- Master password unlock
- Biometric unlock (fingerprint / face)
- Time-based auto-lock
- Trusted device management
- Login & device activity logs
- Password reuse detection
- Breach alerts (planned)
- Password change reminders
- Security score & insights
- Dark-mode first
- Figma-driven premium UI
- Clean, calm, security-focused layout
- Responsive across screen sizes
- Frontend: Flutter
- Backend: Firebase (Firestore, Auth, Cloud Functions)
- Encryption: AES / Argon2 / PBKDF2 (strategy-based)
- Platforms: Android (iOS planned)
- Design: Figma-driven UI kits
- ✅ Core UI complete (vault & credential flows)
- 🚧 Encryption & data model in progress
- 🚧 Autofill & sync planned
- 🚧 Onboarding & recovery flows planned
This project is actively being developed with a security-first mindset.
This project is licensed under the MIT License
You are free to use, modify, and distribute this project with proper attribution.
- 🌐 Portfolio: https://shubham-ranswal.web.app/
- 💼 LinkedIn: https://www.linkedin.com/in/shubhamranswal
Passave will never:
- Store master passwords
- Provide fake “password reset” emails
- Access user vault data
- Compromise encryption for convenience
Security is a contract. Passave keeps it.