Personal zero-knowledge password vault for secure password management.
- Secure password storage and management using end-to-end encryption: Store and organize passwords with encryption that protects data from server access.
- OPAQUE-based authentication for privacy-preserving login: Login process uses OPAQUE protocol to verify credentials without exposing passwords to the server.
- Zero-knowledge architecture ensuring data privacy: Design ensures the server never sees or stores unencrypted data, keeping your information private.
- Client-side encryption ensuring data is encrypted before transmission: All encryption occurs on your device before data is sent, adding an extra layer of security.
├── backend/ # Python FastAPI backend
├── frontend/ # React + Vite frontend
└── deployments/ # Docker Compose deployment
- Python 3.11+
- Node.js 18+
- Docker & Docker Compose
- Backend: Python: FastAPI (REST API), SQLAlchemy (ORM), PostgreSQL (database), JWT & OPAQUE (authentication)
- Frontend: React (TypeScript), Vite (build tool), Tailwind CSS & Ant Design (styling)
- Deployment: Docker, Docker Compose, nginx (reverse proxy)
-
Clone the repository:
git clone https://github.com/h3yzack/vigipastore.git cd vigipastore -
Backend Setup:
cd backend python -m venv .venv source .venv/bin/activate # On Windows: .venv\Scripts\activate pip install -r requirements.txt # Run database migrations alembic upgrade head
-
Frontend Setup:
cd frontend npm install -
Configure Environment (Optional):
Set up
.envfiles inbackend/directory if needed for custom configurations.cd backend cp .env.example .env # Edit .env with your actual configuration
-
Configure Environment (Optional):
Set up
.envfiles inbackend/andfrontend/directories if needed for custom configurations. -
Start the Application:
- Backend:
uvicorn app.main:app --reloadormake run(from backend directory) - Frontend:
npm run dev(from frontend directory) - Access the app at
http://localhost:5173(frontend) andhttp://localhost:8000/docs(API docs)
- Backend:
For production or testing the full stack:
cd deployments
docker-compose up --buildThis starts all services including PostgreSQL, backend API, frontend, and nginx reverse proxy.
- Open your browser and navigate to
http://localhost:5173(local dev) orhttp://localhost:8080(Docker). - Register a new account or log in.
- Create and manage your password vaults securely.
- All data is encrypted client-side before transmission.
This project is intended for educational and personal use. For production use, ensure HTTPS, regular security audits, and updated dependencies.
Contributions are welcome!
This project is licensed under the GNU General Public License v3.0 - see the LICENSE file for details.