Sandpass — Zero Knowledge

SandPass is a zero-knowledge password manager that keeps your data truly private.

🔒 Zero-Knowledge Architecture
Your master password never leaves your device. We use OPAQUE (RFC 9807) — the server never sees your password, not even during authentication.

🛡️ Military-Grade Encryption
- AES-256-GCM for vault encryption
- Argon2id for key derivation (OWASP recommended)
- Per-device key wrapping

✨ Features
- Secure password generator
- Autofill on any website
- Cross-device sync (encrypted)
- TOTP two-factor authentication
- WebAuthn/passkey support
- Dark mode
- Breach monitoring

🔐 Security First
- Open-architecture encryption using audited libraries
- Anti-phishing: credentials are domain-locked
- Session tokens (not JWT) for instant revocation
- Progressive lockout on failed attempts

Your passwords are encrypted before they ever leave your browser. Even we can't read them.