Modern, Offline-First Desktop Password & Secrets Manager
An uncompromising, local-first password manager engineered for privacy, speed, and cryptographic integrity.
Features • Architecture • Getting Started • Security • Contributing
FLARE PaS (Passwords & Secrets) is designed around zero-knowledge principles. Your secrets never touch an external cloud server without your explicit command. All vaults are stored locally in an encrypted file format using industry-standard authenticated cryptographic primitives.
- Offline-First & Zero-Knowledge: Your master password and unencrypted credentials never leave your machine.
- Battle-Tested Cryptography: Key derivation with Argon2id and authenticated encryption with XChaCha20-Poly1305 (powered by
libsodium). - Quick Search (Spotlight-Style Launcher): Global hotkey (
Cmd/Ctrl + Shift + Space) to quickly search, copy credentials, or generate TOTP tokens on the fly without opening the main window. - Built-in TOTP / 2FA Authenticator: Real-time two-factor authentication code generation with visual countdown and instant clipboard copy.
- Entropy-Aware Password Generator: Configurable length, character sets, passphrase generation, and real-time strength scoring via
zxcvbn. - Browser Extension Bridge: Secure, token-paired local WebSocket communication allowing autofill and vault access directly inside Chromium-based browsers.
- Cross-Platform: Native desktop experience on macOS and Windows (Linux planned for future releases).
┌────────────────────────────────────────────────────────┐
│ FLARE PaS │
├──────────────────────┬─────────────────────────────────┤
│ Main Process │ • Electron lifecycle & Window │
│ │ • Secure Vault Engine (Sodium) │
│ │ • Local WebSocket Bridge Server│
│ │ • Tray & Quick Search Overlay │
├──────────────────────┼─────────────────────────────────┤
│ Preload Script │ • Context-isolated IPC bridge │
│ │ • Safe API exposure │
├──────────────────────┼─────────────────────────────────┤
│ Renderer Process │ • React 19 UI & Tailwind CSS │
│ │ • Zustand State Management │
│ │ • Framer Motion Transitions │
└──────────────────────┴─────────────────────────────────┘
- Node.js:
v20.xor later (LTS recommended) - npm:
v10.xor later (orpnpm/yarn)
Clone the repository and install all dependencies:
git clone https://github.com/tanislavivanov/PaS.git
cd PaS
npm installRun the Electron application in hot-reloading development mode:
npm run devExecute the unit and cryptographic test suite using Vitest:
npm test# Type check both Node (main/preload) and Web (renderer)
npm run typecheck
# Lint codebase
npm run lint
# Format code with Prettier
npm run formatPack distributable native installers using Electron Builder:
# Build for macOS (DMG / Zip)
npm run build:mac
# Build for Windows (NSIS Installer / Portable)
npm run build:win├── .github/ # GitHub Actions CI & Issue/PR templates
├── assets/ # Repository showcase assets & screenshots
├── browser-extension/ # Companion browser extension (Chromium / Manifest V3)
├── build/ # Application packaging assets & entitlements
├── resources/ # Tray and runtime media resources
├── src/
│ ├── main/ # Electron main process & vault crypto engine
│ │ ├── ipc/ # IPC handlers (vault, clipboard, auth)
│ │ ├── vault-engine/ # libsodium encryption & file serialization
│ │ └── extension-server.ts # Local extension WebSocket bridge
│ ├── preload/ # Electron contextBridge preload scripts
│ └── renderer/ # React frontend (screens, components, stores)
├── electron-builder.yml # Multi-platform packaging configuration
├── electron.vite.config.ts # Electron Vite bundler configuration
└── package.json
Security is foundational to FLARE PaS. If you discover a vulnerability or security issue, please review our Security Policy before submitting a public issue.
Contributions, bug reports, and feature proposals are welcome! Please check the Contributing Guidelines to get started.
This project is licensed under the MIT License.