README

A free, open-source, zero-knowledge End-to-End Encrypted (E2EE) Password Manager & Vault SaaS platform. Built with client-side Web Crypto AES-GCM 256-bit encryption, RFC 6238 TOTP 2FA, Apple Notes-style notepad, customizable multi-column checklists, and 7-day persistent device sessions.

👨‍💻 Developer & Project Info

Lead Developer: Ishrafil Khan
Website: https://larwell.com
Role: Founder & Lead Developer
Email: mail.ishrafil@gmail.com
Repository: https://github.com/developer-ishrafilkhan/authmaster
License: MIT Open Source (Free for everyone)

⚡ Core Features

1. 🛡️ Zero-Knowledge Client-Side Encryption (E2EE)

PBKDF2 Key Derivation: 100,000 SHA-256 iterations with user-specific cryptographic salt.
AES-GCM 256-bit Cipher: All credentials, notes, and checklist matrices are encrypted and decrypted directly in your web browser using native window.crypto.subtle.
Zero Server Exposure: The server only stores ciphertext blobs. Even database administrators cannot read your passwords, notes, or checklist entries.

2. 📱 Native Mobile-First & Desktop UI

Mobile Design: Touch-friendly large inputs (h-14, 16px text to prevent mobile zoom), bottom navigation bar, single-tap copy triggers, and bottom sheet dialogs.
Strict Single-Line Buttons: Optimized layout prevents awkward button wrapping on compact screens.
Desktop Design: Multi-column responsive layout, live search (Cmd + K / Ctrl + K), and category filters.
PWA Ready: Works as an installable Progressive Web App with offline service worker asset caching.

3. 🔐 2FA Authenticator & 7-Day Session Persistence

RFC 6238 TOTP Authenticator: Compatible with Google Authenticator, Microsoft Authenticator, and Authy with QR code scanning and manual key backup.
1-Week Device Session: Device sessions remain valid for 7 days (604,800 seconds) so users don't have to re-enter their master password on every browser reload.
Live Countdown & Fast Lock: Header badge indicates remaining session validity, with a single-click lock button to wipe in-memory keys.

4. 🔑 Multi-Account Platform Manager

Multiple Accounts per Platform: Add unlimited accounts under a single platform (e.g. Work, Personal, and Admin accounts under Google).
1-Click Copy Buttons: Independent copy actions for username/email, password, and website URL.
Security Actions: In-card password generation, plaintext eye reveal toggle, and direct website launcher.

5. 📝 Apple Notes Notepad Experience

Minimalist Paper Canvas: Authentic lined paper design with zero obstructive textboxes or form outlines.
Seamless Navigation: Tap < Notes or Done to automatically save changes.
Automatic Title Extraction: Automatically derives note titles from the first line when left blank.

6. 📊 Multi-Column & Multi-Row Dynamic Grids

Customizable Columns: Create columns of type Checkbox or Text (e.g., Status, Task, Owner, Notes).
Dynamic Rows & Inline Editing: Interactive checkboxes toggle and save instantly.
Progress Tracking: Real-time completion progress indicator.

7. 🎲 Standalone Cryptographic Password Generator

High-entropy browser-based password generation with customizable length, symbols, numbers, and uppercase/lowercase rules.

🚀 Installation & Setup

Requirements

PHP 8.1, 8.2, or 8.3
MySQL / MariaDB (PDO enabled)
Web Server: Apache, Nginx, or PHP built-in server

Quick Start

# Clone the repository
git clone https://github.com/developer-ishrafilkhan/authmaster.git
cd authmaster

# Run with PHP built-in development server
php -S 127.0.0.1:8088

Open http://127.0.0.1:8088 in your browser. The database schema (authmaster_db) is initialized automatically on first visit.

🌐 Community & Support

Created and maintained by Ishrafil Khan • https://larwell.com For issues or suggestions, please visit the GitHub Issues page.

larwell / authmaster

Package info

Security

Statistics