Sovereign Vault Features.
An index of PassCrypt’s zero-knowledge security primitives, local client sandboxing mechanism, and self-hosted cloud data structures.
Zero-Knowledge Primitive Set
PassCrypt enforces mathematical privacy bounds. Our application prevents passwords, raw keys, or master credentials from traveling across HTTP network requests.
Argon2id Key Derivation Hashing
Derives Auth and Master keys inside browser memory using Memory-Hard parameters (64MB RAM allocation, 3 iterations, 4 parallelism). Immensely resistant to GPU-accelerated brute-force attacks.
AES-256-GCM Symmetric Cipher
Encrypts all vault items locally. Utilizes unique cryptographically secure 96-bit random nonces for every encryption sequence, guaranteeing absolute confidentiality and cipher integrity.
Browser WebCrypto Native API
Runs directly inside the compiled browser WebCrypto runtime context. Eliminates standard third-party npm javascript package vulnerability vectors.
keyLength: 256,
nonceLength: 12, // 96 bits CS-PRNG
kdf: "Argon2id",
kdfParams: { memory: 65536, iterations: 3, parallelism: 4}
Sovereign Vault Services
Client Sandbox Isolation
All security computations and credential processing run inside your local sandboxed browser memory context. Raw cryptographic keys never touch physical disks or persistent database stores.
Zero-Knowledge Server Sync
Synchronizes user credentials as high-entropy AES-256-GCM base64 blocks. Our central PostgreSQL cluster operates exclusively as a blind ciphertext drive.
Append-Only Audit Trails
Enforces strict row-level PostgreSQL database security preventing updates or deletes on log data. Provides complete, auditable trails for enterprise and group accounts.
Multi-Device Key Replication
Real-time synchronization replication keeping vaults current across your devices, using secure zero-knowledge transaction lines.
Volatile Key Auto-Lock
Wipes and zeros out data encryption keys from volatile SessionStorage on tab close, manual window locking, or configurable idle timeout.
Sovereign Portability Exports
Allows client database extraction into standardized, decrypted JSON or CSV format. Initiates local browser memory assembly, bypassing server compiling steps.
Federated Member Sandboxes
Allows group administrators to provision isolated vaults for teams. Group administrators manage accounts without ever obtaining the keys to access vaults.
Razorpay UPI Payment Compliancy
Billed locally in Indian Rupees (₹) inclusive of GST. Supports secure UPI mandates (Paytm, Google Pay, PhonePe) and cards via our integrated Razorpay payment gateway.
Local Password Generator
Utilizes secure, browser-native `crypto.getRandomValues()` and rejection sampling to generate strong, high-entropy password strings with uniform probability distributions.
Protect Your Digital Keys Today
Initialize your zero-knowledge private vault in under 2 minutes. Free Sentry tier supports up to 10 secure entries.