What I learned building a local-only password manager (PassForgePro)

Details

External ID

46709825

Source

HN

Company

—

Product

What I learned building a local-only password manager (PassForgePro)

Website domain

github.com

Launched

Jan. 21, 2026

Cohort

—

Upvotes

5

Upvotes percentile

0.09617918313570488

Tags

—

Fetched at

Sept. 7, 2026, 9:25 p.m.

Updated at

Sept. 7, 2026, 9:25 p.m.

Description

Show HN: What I learned building a local-only password manager (PassForgePro)Hi HN,I built PassForgePro as a learning project to better understand password manager design, local-first security, and common cryptographic pitfalls.The goal was not to replace mature tools like Bitwarden or KeePass, but to explore:* how a local-only, zero-knowledge style design can work * key derivation with PBKDF2 and encrypted SQLite vaults (AES-256-GCM) * handling sensitive data in memory and clipboard cleanup * defining a realistic threat model and its limitationsThis project is experimental and unaudited. I’m sharing it mainly to get feedback on the architecture, crypto choices, and overall approach, and to discuss what I got wrong or could improve (audits, reproducible builds, testing, etc.).I’d really appreciate feedback, especially from people with security or cryptography experience.Repo: https://github.com/can-deliktas/PassForgePro Docs / demo: https://can-deliktas.github.io/PassForgePro

• Source listing
• Website