DEV Community

qqwer
qqwer

Posted on

I Built a Zero-Knowledge Password Manager (Self-Hosted, Fully Open Source) β€” Looking for Contributors πŸš€

Over the past months, I’ve been building something I personally needed β€” a secure, self-hosted password manager where you fully own your data.

No SaaS. No hidden sync. No β€œtrust us with your secrets”.

Just you, your keys, and full control.

πŸ” What is this project?

This is a zero-knowledge password manager designed for people who:

don’t want to trust third-party services
prefer self-hosted solutions
care about privacy, encryption, and control

Everything is built around a simple idea:

Your data should never leave your control β€” encrypted end-to-end.

βš™οΈ Key Features
πŸ”’ True End-to-End Encryption
All sensitive data is encrypted on the client
Server never sees your plaintext data
Zero-knowledge architecture
🏠 Fully Self-Hosted
Deploy it wherever you want
No dependency on external SaaS
Works in your own infrastructure
πŸ”‘ Multiple Unlock Methods

Flexible security model:

TOTP (2FA)
Biometrics
PIN code

πŸ‘‰ You can choose what fits your threat model

🎨 Clean UX/UI (3 Themes Included)

A lot of effort went into making it not just secure β€” but actually enjoyable to use:

3 built-in themes
smooth and minimal UI
designed for real daily usage
🌈 Upcoming: Theme Generator

One of the next big features:

custom theme generator
full UI personalization
making the app feel truly yours
πŸ“‚ Advanced Structure
modular architecture
hidden/internal modules (TOTP, auth flows, etc.)
built with scalability in mind
πŸ“œ License
fully open source
non-commercial license
πŸ€” Why I built this

I was tired of:

trusting SaaS with sensitive data
closed-source password managers
limited control over security

So I decided to build something:

transparent, private, and fully under user control

🚧 Current Status
Core functionality is implemented
Encryption + auth flows are working
UX/UI is already polished
Project is actively evolving
🀝 Looking for Contributors

I’ve done a lot solo, but at this point:

this project needs more hands

I’m looking for people who are interested in:

security / cryptography
frontend (UX/UI improvements)
mobile / cross-platform
architecture & performance
open-source collaboration
πŸ’‘ How You Can Help

Even small contributions matter:

fixing bugs
improving UI
suggesting features
reviewing code
improving docs

πŸ‘‰ Or even just:

leaving a ⭐
sharing feedback
πŸ”₯ Why Join?
work on a real-world security product
contribute to privacy-first software
shape an open-source tool from early stage
build something meaningful (not just another CRUD app)
πŸ“Œ Final Thoughts

This is still an early-stage project β€” which means:

you can directly influence what it becomes

If you care about:

privacy
security
open-source
or just building something cool

You’re very welcome here.

πŸ‘‰ Check out the repo and jump in
πŸ‘‰ Contributions, ideas, and feedback are all appreciated

Let’s build something truly secure β€” together πŸ”

GitHub logo SoulNaturalist / zero_password_manager

Open-source self-hosted password manager built with Flutter. Store passwords and crypto seed phrases securely without cloud storage.

πŸ” Zero Password Manager

Zero Cloud. Zero Tracking. Zero Compromise.

A privacy-first, self-hosted password manager built on true zero-knowledge principles.
Your vault lives on your server. Your key never leaves your device. Your secrets stay yours.


Release License Flutter FastAPI AES-256-GCM Platform


Download APK Feature Guide How it Works



Zero Password Manager Demo



The Problem with Every Other Password Manager

Every major password manager β€” LastPass, 1Password, Bitwarden Cloud β€” ultimately stores your vault on someone else's server. "Zero-knowledge" in their marketing means they claim not to read your data. It doesn't mean they can't.

Zero Password Manager takes a different position: the server that holds your vault is one you run yourself. On your home server, your VPS, your Raspberry Pi. The encrypted vault sits on hardware you physically control.

Combined with client-side encryption that ensures the server is cryptographically blind to all vault contents, this is privacy that doesn't require trusting anyone.

No cloud subscription. No vendor lock-in. No breach notifications from a…

GitHub logo SoulNaturalist / zero_password_manager

Open-source self-hosted password manager built with Flutter. Store passwords and crypto seed phrases securely without cloud storage.

πŸ” Zero Password Manager

Zero Cloud. Zero Tracking. Zero Compromise.

A privacy-first, self-hosted password manager built on true zero-knowledge principles.
Your vault lives on your server. Your key never leaves your device. Your secrets stay yours.


Release License Flutter FastAPI AES-256-GCM Platform


Download APK Feature Guide How it Works



Zero Password Manager Demo



The Problem with Every Other Password Manager

Every major password manager β€” LastPass, 1Password, Bitwarden Cloud β€” ultimately stores your vault on someone else's server. "Zero-knowledge" in their marketing means they claim not to read your data. It doesn't mean they can't.

Zero Password Manager takes a different position: the server that holds your vault is one you run yourself. On your home server, your VPS, your Raspberry Pi. The encrypted vault sits on hardware you physically control.

Combined with client-side encryption that ensures the server is cryptographically blind to all vault contents, this is privacy that doesn't require trusting anyone.

No cloud subscription. No vendor lock-in. No breach notifications from a…

πŸ” Security & Transparency Note

At this stage, the project has not been certified or audited by a third-party security company.

The main reason is simple:

  • professional security audits are extremely expensive
  • and the project is still at an early stage of development

However, there are a few important things to highlight:

  • the project is fully open source
  • the architecture is designed around zero-knowledge and end-to-end encryption principles
  • everything is transparent and open for review

🚫 No Commercial Intent

This project is not built for commercial purposes.

There are no plans to turn it into a paid product β€” the goal is to build something:

  • useful
  • private
  • and community-driven

🀝 Support Matters

Since this is an independent project, any kind of support really makes a difference:

  • ⭐ starring the repository
  • sharing the project
  • giving feedback
  • contributing code

Even something as simple as a GitHub star is a huge motivation to keep building and improving this project further.

Thank you β€” it genuinely helps more than you might think πŸ™Œ

Top comments (0)