An Enterprise-Grade Secure Password & Credential Manager
An Enterprise-Grade Secure Password & Credential Manager

TrustVault

Scroll down
Sahan Ranasingha
Sahan Ranasingha
I`m
  • Residence:
    Sri Lanka
  • City:
    Akuressa
  • Age:
    25
  • Mobile:
    +94742280570

TrustVault — an Enterprise-Grade Secure Password & Credential Manager

Custom Software Development, Full-Stack Web Development
  • Status:
    Completed

TrustVault

TrustVault is an enterprise-grade secure password and credential management platform built with a zero-trust security architecture. It enables organizations to securely store, manage, and share sensitive credentials using enterprise-grade encryption, role-based access control, comprehensive audit logging, and seamless browser integration.

🌟 Key Features:

  • Two-Tier Key Encryption Architecture: Master Encryption Key (MEK) securely wraps the Data Encryption Key (DEK), ensuring encryption keys are never stored in plaintext.
  • AES-256-GCM Encryption: Every credential is encrypted using AES-256-GCM with unique IVs and authentication tags for maximum security.
  • Zero-Downtime Key Rotation: Rotate encryption keys securely without interrupting users or system availability.
  • Role-Based Access Control (RBAC): System Administrators and Standard Users with fine-grained permissions.
  • Secure Credential Sharing: Share passwords securely with individual users or groups using View-only or Edit permissions.
  • Comprehensive Audit Logging: Track vault access, password reveals, permission changes, login attempts, and key rotation events.
  • Browser Extension Integration: Chrome Manifest V3 and Firefox extension with smart domain matching and one-click autofill.
  • Enterprise Security: Built with Argon2id password hashing, Helmet security headers, API protection, and rate limiting.
  • 🛠️ Technologies Used:

  • React 19
  • Vite 7
  • Tailwind CSS v4
  • TanStack React Query v5
  • React Router v7
  • Node.js
  • Express v5
  • MongoDB & Mongoose
  • AES-256-GCM Encryption
  • Argon2id Password Hashing
  • Helmet
  • Rate Limiter Flexible
  • Chrome Manifest V3 Extension
  • Firefox Browser Extension
  • Zod v4
  • Lucide Icons
  • 📦 Highlights:

    • Zero-Trust Security Architecture
    • Two-Tier MEK/DEK Encryption
    • AES-256-GCM Credential Encryption
    • Secure Browser Autofill
    • Enterprise RBAC
    • Secure Credential Sharing
    • Audit Trail & Compliance Logging
    • Zero-Downtime Key Rotation

    🔖 Skills:

  • Enterprise Software Development
  • Cybersecurity & Applied Cryptography
  • Password Management Systems
  • Zero-Trust Security Architecture
  • AES-256-GCM Encryption
  • Role-Based Access Control (RBAC)
  • Browser Extension Development
  • REST API Development
  • React Development
  • Node.js Backend Development
  • MongoDB Database Design
  • Audit Logging & Compliance
  • © 2025 All Rights Reserved.
    Email: sahanranasingha1@gmail.com
    Write me a message
    Write me a message

      * I promise the confidentiality of your personal information