Kavach v1.0.0

Kavach v1.0.0

First stable release of Kavach, a local-first personal password manager.

Features

• AES-256-GCM encryption with per-credential data encryption keys (DEK)
• TOTP-based password reveal via authenticator app (Google Authenticator, Authy, etc.)
• Master password never stored -- derived key lives in memory only, zeroed on lock/logout
• Auto-lock after 10 minutes of inactivity
• Password health report (weak, reused, old passwords)
• Encrypted vault export and import
• Search by username and URL
• Full audit log of all vault activity
• SMTP-configurable email for OTP notifications

Installation (Windows)

1. Download Kavach-v1.0.0-windows-x64.zip
2. Extract the zip
3. Run Kavach.exe from the extracted folder

No Java installation required -- the JRE is bundled inside the package.
Bundled runtime: Eclipse Temurin 21.0.9 (OpenJDK, free for personal and commercial use).

Notes

• All data is stored locally at %USERPROFILE%\.kavach\kavach.db
• The vault is created once per machine on first launch
• If the master password is forgotten, vault data is unrecoverable