AEU Pass is a self-hosted password, passkey and two-factor (TOTP) manager built to honour the phrase "zero-knowledge" end to end. Your master password becomes a vault key on your own device with Argon2id and never leaves it; the server only ever holds opaque ciphertext it cannot read, decrypt or hand over, not for support, not for a subpoena, not for a rogue admin.
Zero-knowledge that actually holds
The server never sees your item titles, URLs, notes, passwords, TOTP secrets, passkeys, card numbers or attachments. Key-derivation parameters are sealed inside the encrypted blob, so a stolen database dump yields ciphertext and nothing else: no metadata, no head start. There is no unlock endpoint and no key escrow, and authentication uses a separate secret from the vault key. When LastPass was breached, attackers walked off with encrypted vaults plus the derivation parameters and unencrypted URLs and item names. Zero-knowledge should mean the attacker gets ciphertext and nothing more. That is what this delivers.
MIL-SPEC cryptography, including post-quantum
- AES-256-GCM authenticated encryption for every item, attachment and sync message.
- Post-quantum hybrid: ML-KEM-1024 (Kyber, NIST Level 5) combined with X25519, so an attacker must break both a classical and a post-quantum primitive. Shipping now, not on a roadmap.
- RSA-8192 with OAEP-SHA256 key envelopes and X25519 forward secrecy for cross-device sync.
- Million-iteration key derivation: PBKDF2-HMAC-SHA3-512 at 1,000,000 iterations for the vault key, and an encrypted local cache at the same strength, well beyond the ~600,000 the best-known managers default to.
- Signed requests: every call carries a timestamp, a random nonce and an HMAC signature with a short validity window and nonce tracking, so replay attacks are structurally impossible. TLS 1.3 only, with certificate pinning in the native apps.
Data integrity: the layer almost no one builds
Most managers protect only confidentiality. AEU Pass adds a full, audit-driven integrity layer:
- Versioned, conflict-safe writes so two devices can never silently overwrite each other; the second write is rejected and must merge.
- Read-time hash verification of every blob, so disk corruption, a bad cache or a swapped blob is caught immediately.
- Header fingerprints that stop one device from clobbering another device's wrapped keys.
- Write-ahead journaling so an edit interrupted by a dropped network or a closed tab is replayed, never lost.
- Stale-reveal guard: revealing a password re-checks the current version first, so you never copy an out-of-date secret because a device had not synced.
One vault, every platform, one encryption boundary
The same vault and the same client-side crypto everywhere: a web app, Firefox, Chrome and Safari extensions, native iOS and Android apps, Windows, macOS and Linux desktop builds, iOS system AutoFill with passkey and TOTP suggestions, and a home-screen TOTP widget. Cross-device changes propagate in under a second over a live, signed connection, with an offline queue that replays on reconnect. There is no web-versus-mobile feature gap.
Every item type is first-class
- Logins with multiple URLs and per-URL match rules, linked TOTP, per-field history, folders, tags, custom fields and attachments.
- TOTP, passkeys and cards (with brand detection and the CVV hidden in list views), plus identities for form filling.
- Encrypted attachments up to 64 MiB, full-text search across every field, and honest per-item history that separates last-edited from last-used.
Built-in security intelligence
AEU Pass actively watches your security posture without ever seeing your secrets:
- Privacy-preserving URL reputation: saved sites are cross-checked against phishing databases (Phishing.Database) and, optionally, VirusTotal, but only a SHA-256 of each hostname is uploaded, so your credentials and full URLs never leave your device. If a site is known bad, you are warned at the point of use.
- Password-health dashboard: your vault is scanned for breached, reused and weak passwords, with an entropy-based strength analysis (from very weak to excellent) and reuse detection, so you can see and fix the credentials that put you at risk.
- Live and current: the known-bad lists refresh continuously and health results update in real time as you add or change items, all computed without exposing what is inside your vault.
Enterprise access control, without the enterprise tax
- Organisations, collections, groups and organisational units with per-(user or group, collection) grants for read, write, share and admin.
- Cryptographic sharing: adding a member re-wraps only the collection key, and access is enforced by key possession, not just a server rule.
- Passwordless passkeys, push-to-approve 2FA with number matching, per-device trust and revocation, and enterprise identity via LDAP, Active Directory, FreeIPA and Azure AD single sign-on.
- Tamper-evident audit log and live updates the moment an admin changes your access. It brings the kind of organisation-wide access control you would expect from an enterprise password platform, delivered as a self-hosted solution.
Self-hosted, partitioned and verifiable
- Separated planes: identity and encrypted storage run on independent backends, so compromising one does not hand over the other, and each can be backed up and rotated on its own schedule.
- You own everything: the keys, the database, the backups and the update schedule, as a single self-contained binary with no Docker and no vendor cloud.
- Verified adversarially: hardened across nine independent audit rounds, with every finding confirmed by a separate reviewer and the few remaining items tracked and planned, not hidden.
Built with Go, React, TypeScript, Flutter, Argon2id, AES-256-GCM, RSA-8192, ML-KEM-1024.
Frequently asked
What is Zero-Knowledge Password Manager?
AEU Pass is a self-hosted password, passkey and two-factor (TOTP) manager built to honour the phrase "zero-knowledge" end to end. Your master password becomes a vault key on your own device with Argon2id and never leaves it; the server only ever holds opaque ciphertext it cannot read, decrypt or hand over, not for support, not for a subpoena, not for a rogue admin. Zero-knowledge that actually holds The server never sees your item titles, URLs, notes, passwords, TOTP secrets, passkeys, card numbers or attachments. Key-derivation parameters are sealed inside the encrypted blob, so a stolen database dump yields ciphertext and nothing else: no metadata, no head start. There is no unlock endpoint and no key escrow, and authentication uses a separate secret from the vault key. When LastPass was breached, attackers walked off with encrypted vaults plus the derivation parameters and unencrypted URLs and item names. Zero-knowledge should mean the attacker gets ciphertext and nothing more. That is what this delivers. The vault stays sealed until you unlock it on-device; the server never sees your master password.MIL-SPEC cryptography, including post-quantum AES-256-GCM authenticated encryption for every item, attachment and sync message. Post-quantum hybrid: ML-KEM-1024 (Kyber, NIST Level 5) combined with X25519, so an attacker must break both a classical and a post-quantum primitive. Shipping now, not on a roadmap. RSA-8192 with OAEP-SHA256 key envelopes and X25519 forward secrecy for cross-device sync. Million-iteration key derivation: PBKDF2-HMAC-SHA3-512 at 1,000,000 iterations for the vault key, and an encrypted local cache at the same strength, well beyond the ~600,000 the best-known managers default to. Signed requests: every call carries a timestamp, a random nonce and an HMAC signature with a short validity window and nonce tracking, so replay attacks are structurally impossible. TLS 1.3 only, with certificate pinning in the native apps. Data integrity: the layer almost no one builds Most managers protect only confidentiality. AEU Pass adds a full, audit-driven integrity layer: Versioned, conflict-safe writes so two devices can never silently overwrite each other; the second write is rejected and must merge. Read-time hash verification of every blob, so disk corruption, a bad cache or a swapped blob is caught immediately. Header fingerprints that stop one device from clobbering another device's wrapped keys. Write-ahead journaling so an edit interrupted by a dropped network or a closed tab is replayed, never lost. Stale-reveal guard: revealing a password re-checks the current version first, so you never copy an out-of-date secret because a device had not synced. One vault, every platform, one encryption boundary The same vault and the same client-side crypto everywhere: a web app, Firefox, Chrome and Safari extensions, native iOS and Android apps, Windows, macOS and Linux desktop builds, iOS system AutoFill with passkey and TOTP suggestions, and a home-screen TOTP widget. Cross-device changes propagate in under a second over a live, signed connection, with an offline queue that replays on reconnect. There is no web-versus-mobile feature gap. A built-in authenticator surfaces your TOTP codes right next to your logins.Every item type is first-class Logins with multiple URLs and per-URL match rules, linked TOTP, per-field history, folders, tags, custom fields and attachments. TOTP, passkeys and cards (with brand detection and the CVV hidden in list views), plus identities for form filling. Encrypted attachments up to 64 MiB, full-text search across every field, and honest per-item history that separates last-edited from last-used. Passkeys are stored encrypted in the vault and work across web, iOS and Android.Built-in security intelligenceAEU Pass actively watches your security posture without ever seeing your secrets:Privacy-preserving URL reputation: saved sites are cross-checked against phishing databases (Phishing.Database) and, optionally, VirusTotal, but only a SHA-256 of each hostname is uploaded, so your credentials and full URLs never leave your device. If a site is known bad, you are warned at the point of use.Password-health dashboard: your vault is scanned for breached, reused and weak passwords, with an entropy-based strength analysis (from very weak to excellent) and reuse detection, so you can see and fix the credentials that put you at risk.Live and current: the known-bad lists refresh continuously and health results update in real time as you add or change items, all computed without exposing what is inside your vault.Enterprise access control, without the enterprise tax Organisations, collections, groups and organisational units with per-(user or group, collection) grants for read, write, share and admin. Cryptographic sharing: adding a member re-wraps only the collection key, and access is enforced by key possession, not just a server rule. Passwordless passkeys, push-to-approve 2FA with number matching, per-device trust and revocation, and enterprise identity via LDAP, Active Directory, FreeIPA and Azure AD single sign-on. Tamper-evident audit log and live updates the moment an admin changes your access. It brings the kind of organisation-wide access control you would expect from an enterprise password platform, delivered as a self-hosted solution. Organisations, units, groups and collections, with LDAP and Azure AD identity built in.Self-hosted, partitioned and verifiable Separated planes: identity and encrypted storage run on independent backends, so compromising one does not hand over the other, and each can be backed up and rotated on its own schedule. You own everything: the keys, the database, the backups and the update schedule, as a single self-contained binary with no Docker and no vendor cloud. Verified adversarially: hardened across nine independent audit rounds, with every finding confirmed by a separate reviewer and the few remaining items tracked and planned, not hidden.
What was Zero-Knowledge Password Manager built with?
It was built with Go, React, TypeScript, Flutter, Argon2id, AES-256-GCM, RSA-8192, ML-KEM-1024, WebAuthn, SQLCipher.
Who built Zero-Knowledge Password Manager?
Zero-Knowledge Password Manager was designed and built by Sokol Alickaj, the engineer behind AEU-I.
Can AEU-I build something similar for me?
Yes. AEU-I designs and builds custom software, web and mobile apps and hosting. Get in touch to discuss a similar project.