Skip to content

Latest commit

 

History

History
68 lines (49 loc) · 1.96 KB

File metadata and controls

68 lines (49 loc) · 1.96 KB

HA's Password Locker

Status: v0.3 (Master Password System Complete)
Mission: A privacy-first, local-only password manager browser extension.

HA's Password Locker Official Logo
Official Project Logo

👋 What is this?

HA's Password Locker is a browser extension that gives you total control over your credentials. Unlike commercial password managers, this stores data locally on your device, encrypted with your personal master key.


✅ What's Built

Core Modules

Module Description
core/logic.js Secure password generator with crypto.getRandomValues()
core/passencryption.js AES-GCM encryption for passwords
core/auth.js Master password hashing with PBKDF2 (600k iterations)
core/storage.js Chrome storage API wrapper
core/session.js Session management with auto-lock

UI Pages

Page Description
ui/popup/ Password generator popup
ui/setup/ First-time setup with master password
ui/manager/ Password manager (in development)

🛠️ Tech Stack

  • Core: JavaScript (ES6 Modules)
  • Encryption: AES-GCM (via Web Crypto API)
  • Key Derivation: PBKDF2-SHA256 (600,000 iterations)
  • Storage: chrome.storage.local + chrome.storage.session
  • Architecture: Local-First (No Cloud, No Network)

🔐 Security Features

  • Master Password: Never stored - only salted PBKDF2 hash
  • Encryption: AES-256-GCM for all stored passwords
  • Session: chrome.storage.session (survives background hibernation)
  • Auto-Lock: Configurable inactivity timeout

🔜 Next Steps (MVP)

  • Storage Integration (password CRUD)
  • Manager UI
  • Popup Updates
  • Background Script Polish
  • Testing & Final Polish

Author: @HA2077
Open Source | Privacy First