Skip to content
md ~/projects/sifre-kasasi
Project archive

2026

Password Vault

  • C++
  • Qt
  • libsodium
  • CMake
  • Inno Setup
View on GitHubDownload app

Overview

A desktop password manager built around a single encrypted vault file unlocked with one master password. Includes a password health report, breach check, 2FA codes, a password generator and import from browsers.

01 · Problem

People reuse the same password on many sites, pick weak ones or keep them in plain text files and browsers. One breach can unlock every account, and it is hard to notice which password has leaked.

02 · Solution

The vault is encrypted with XChaCha20-Poly1305 using a key derived from the master password with Argon2id; the master password is never stored and any change to the file is detected. The app shows weak, reused and old passwords and checks them against Have I Been Pwned with k-anonymity, sending only a hash prefix. Copied passwords are cleared from the clipboard after 30 seconds and the vault locks itself when idle.

03 · Outcome

v1.0.0 released with a Windows installer, in Turkish and English with dark and light themes. Verified by 19 unit tests including tampered files, wrong passwords, RFC 6238 TOTP test vectors and CSV formats, and ready to try with a 30-entry demo vault.