Simon, S, Crystal
Assword
12.4hMy goal is to have a server that I can securely upload passwords / other documents to. The way it works is the browser makes a secret encryption key via a master password, then it will send over encrypted text to the sever. The sever only sees the encrypted text and never the real stuff.
Devlogs
1 entryIdeaPending
## What I want to make I have an old computer I want to put to use. It was running a mc sever but now I can repurpose it. The app I will make is a secure way to store passwords and other text files like journals. Each "entry" will be a markdown file that is encrypted in the browser and sent to the server. The server will send back that encrypted text and the browser will decrypt it. This makes it impossible for the server to see any sensitive info. ## Auth Each account will have maybe 5 free entries before you have to pay (Im not really planning on making money but I don't want some random ppl to abuse this). Each account will also need a verified email or phone number. A users master passwords wont be stored in the server, just an auth key. The way i make keys will be: masterPassword + "encryption" + salt for the encryption key masterPassword + "auth" + salt for the auth key On creation the auth key and salt will be sent to the server. On login the server will send the salt from the email, then the full stuff after it gets the auth key. ## How I am doing this I'm using fastapi and sqlalchemy to set up the backend. The server is running on my mac and is tunneled to assword-backend.simoncrystal.dev . The frontend is (right now) bare html that uses js to send requests to the server.
