Skip to content

Releases: Keyfount/desktop

Keyfount Desktop v0.0.1

28 May 17:20
14ea4d6

Choose a tag to compare

First release of the Keyfount desktop app — a deterministic password manager that derives your credentials from a master password, the site, and your email, locally, with no vault and no cloud sync required.

Shipped as a single macOS Universal DMG (Apple Silicon + Intel).

⚠️ Unsigned build. Not yet code-signed or notarised, so macOS Gatekeeper will flag it as coming from an unidentified developer. To open it: right-click the app in Finder → Open, then confirm. A signed + notarised build will follow once signing credentials are in place.

Highlights since the start of the project

Core

  • Deterministic password derivation in the Rust core — no stored passwords, no vault required.
  • Counter-based password rotation from the account detail view.
  • Per-site password profiles and default-profile autofill configuration.

Desktop app (Tauri)

  • Full setup / unlock flow with master password, PIN, and biometric unlock.
  • Bitwarden-style 6-group categorised settings, with real sub-pages.
  • Accounts list, account detail, generator, vault switching/creation, and a sync screen with a URL → auth → approved/rejected stepper.
  • Vault export/import and a danger-zone wipe.

Security

  • At-rest encryption of vault.db with SQLCipher.
  • Enforced idle auto-lock timer.
  • PIN blob persisted in a sidecar so unlock-with-PIN survives restarts.

Sync

  • SyncableState v2 with tombstones and authoritative apply.
  • Encrypted pending_ops queue (enqueue-then-drain, pull-before-push).
  • Per-account "last synced" stamp with push/pull direction.

Mobile (Android + iOS)

  • Complete mobile shell — top bar, bottom nav, generator/accounts/settings/vault screens, pull-to-search.
  • iOS AutoFill Credential Provider extension with biometric/master gating and create-account parity.
  • Biometric + PIN unlock with native iOS support; KeyfountTheme + Liquid Glass styling.

Quality

  • Accessibility: focus trap + restore-focus on modals.
  • Full EN/FR internationalisation.
  • Realistic Playwright e2e suite covering both the desktop and mobile shells.
  • CI: shared verify.yml (lint, typecheck, Rust fmt/clippy/tests + golden vectors, e2e, build) gating every PR, plus automated releases.