V15.14.0

✨ Enhancements

App Password Protection System

• Implemented comprehensive password protection for the entire app with zero-knowledge architecture.
• Added PBKDF2-SHA256 key derivation with 1,000,000 iterations for secure password handling.
• Implemented AES-GCM encryption for all PGP keys and sensitive data storage.
• Built session management with encrypted temporary memory storage and automatic cleanup on page refresh.

Password Protection UI Components

• Added PasswordSetupModal for initial password configuration with confirmation.
• Created PasswordUnlockModal for secure app unlocking with password verification.
• Implemented PasswordRemoveModal for removing password protection with current password verification.
• Added DeleteDataModal for data deletion if locked out with confirmation text requirement.
• Created PasswordStatus component showing protection status with quick actions.

Context & State Management

• Built PasswordProtectionProvider context for app-wide password state management.
• Added PasswordProtectionWrapper component for conditional rendering based on unlock status.
• Implemented session validation and automatic session clearing for security.

Database Security Layer

• Enhanced IndexedDB operations with encrypted main key storage.
• Added password-based key derivation and main crypto key encryption.
• Implemented in-memory-only storage for decrypted crypto key with temporary encryption during active sessions.

---

🛠️ Bug Fixes

IndexedDB Loading Optimization

• Fixed asynchronous loading in loadKeysFromIndexedDB function for better performance.
• Improved error handling and Promise resolution in database operations.
• Optimized key decryption with proper async/await patterns.

Component Structure Improvements

• Fixed ToastProvider positioning in layout for proper toast display.
• Corrected component hierarchy with proper provider wrapping.

Code Cleanup & Maintenance

• Removed unused error variables in catch blocks for cleaner code.
• Fixed pagination layout with responsive design for mobile devices.
• Improved error handling consistency across password protection flows.

---

🔒 Security Features

Zero-Knowledge Architecture

• All cryptographic operations happen client-side using Web Crypto API.
• Password never leaves the device – only encrypted data is stored.
• Session-based security with automatic cleanup on page refresh.

Encryption Standards

• AES-GCM 256-bit encryption for all sensitive data.
• PBKDF2-SHA256 with 1,000,000 iterations for password derivation.
• Random IV generation for each encryption operation.

Session Management

• Stores decrypted crypto key in memory only for the duration of an active session.
• Ensures temporary encryption of in-memory crypto key to reduce exposure risk.
• Automatically invalidates sessions on page refresh or tab close to prevent persistence.
• Validates and manages sessions securely with built-in cleanup and expiration logic.

Data Protection

• Complete data deletion capability for locked out situations.
• Password verification required for all sensitive operations.