Nicheloom visits: 58,050 all-time · 7,694 in the last 7 days

The opportunity tracker for new startups.

Today: 1,953 launches · Niche of the day: specialized calculation tools · See what launched today →

What I learned building a local-only password manager (PassForgePro)

Get picks like this daily. Today's launch numbers, the top launches, AI and tech news, and a daily opportunity pick, straight to your inbox.

Want to reach these readers? Sponsor an issue.

Show HN: What I learned building a local-only password manager (PassForgePro)Hi HN,I built PassForgePro as a learning project to better understand password manager design, local-first security, and common cryptographic pitfalls.The goal was not to replace mature tools like Bitwarden or KeePass, but to explore:* how a local-only, zero-knowledge style design can work * key derivation with PBKDF2 and encrypted SQLite vaults (AES-256-GCM) * handling sensitive data in memory and clipboard cleanup * defining a realistic threat model and its limitationsThis project is experimental and unaudited. I’m sharing it mainly to get feedback on the architecture, crypto choices, and overall approach, and to discuss what I got wrong or could improve (audits, reproducible builds, testing, etc.).I’d really appreciate feedback, especially from people with security or cryptography experience.Repo: https://github.com/can-deliktas/PassForgePro Docs / demo: https://can-deliktas.github.io/PassForgePro

HN · launched Jan 21, 2026 · 5 upvotes (top 90%) · 0 views

Niche: password management tools · 92 launches, 18 in the last 7 days · Explore this niche →

Category and tags

  • Security
  • Vertical SaaS
  • Prosumer
  • Not AI
  • Hobby / open-source project

Visit website ↗ Source listing ↗

Could you build this?

Yes A local-only password manager consists of a standard desktop or CLI UI using standard cryptographic libraries (e.g., Argon2id and AES-GCM) to encrypt and decrypt a local database.

Discussion

3 comments analyzed.

Concerns raised: No API for remote access or cloud sync, Experimental project, not production-grade, Does not defend against compromised OS or malicious local software, Potential accessibility API exposure risk

Competitors

Other products that read as similar to this one : 100 launches clear the similarity bar, closest 8 shown.

Attention rank: #98 of 101 (itself plus its competitors, highest first, normalized so YC and Product Hunt are compared fairly).

Launched 83 days after the earliest competitor.

The niche, labels, vibe code rating and competitor comparison on this page are analysis by Nicheloom. If you use them, please credit nicheloom.com. How you may use our data.