Skip to content

GVault 0.1.11

Choose a tag to compare

View all tags
@guberm guberm released this 19 Jul 22:09
v0.1.11
c0204e1
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Zero-knowledge account-password recovery for Web and Android.

  • Master password and recovery private key remain client-side.
  • Server stores only the public verifier and master-protected encrypted envelope.
  • One-time expiring challenges, proof verification, rate limits, redacted audit events, and mandatory recovery-key rotation.
  • Existing accounts require explicit authenticated enrollment.
  • Regular login continues to require only email and account password; the master password is used for registration, vault unlock/restore, and account recovery.

Validation: independent Reviewer APPROVED; repository gate 145/145 + server smoke 1/1; production Web recovery E2E PASS. Physical Pixel 7 Pro acceptance uses the exact attached APK.

Assets 3
Loading