TrustVault
An Enterprise-Grade Secure Password & Credential Manager
Status
Completed
Published
August 2026
Services
Custom Software Development, Full-Stack Web Development
An Enterprise-Grade Secure Password & Credential Manager built with modern web technologies and a zero-trust security architecture. Modern organizations need a secure way to store, share, and manage credentials without compromising security or collaboration. TrustVault was designed to solve that challenge by combining enterprise-grade cryptography, role-based access control, comprehensive audit logging, and a seamless browser experience.
TrustVault
the platform is an enterprise-grade secure password and credential management platform built with a zero-trust security architecture. It enables organizations to securely store, manage, and share sensitive credentials using enterprise-grade encryption, role-based access control, comprehensive audit logging, and seamless browser integration.
🌟 Key Features – TrustVault:
- Two-Tier Key Encryption Architecture: Master Encryption Key (MEK) securely wraps the Data Encryption Key (DEK), ensuring encryption keys are never stored in plaintext.
- AES-256-GCM Encryption: Every credential is encrypted using AES-256-GCM with unique IVs and authentication tags for maximum security.
- Zero-Downtime Key Rotation: Rotate encryption keys securely without interrupting users or system availability.
- Role-Based Access Control (RBAC): System Administrators and Standard Users with fine-grained permissions.
- Secure Credential Sharing: Share passwords securely with individual users or groups using View-only or Edit permissions.
- Comprehensive Audit Logging: Track vault access, password reveals, permission changes, login attempts, and key rotation events.
- Browser Extension Integration: Chrome Manifest V3 and Firefox extension with smart domain matching and one-click autofill.
- Enterprise Security: Built with Argon2id password hashing, Helmet security headers, API protection, and rate limiting.
- React 19
- Vite 7
- Tailwind CSS v4
- TanStack React Query v5
- React Router v7
- Node.js
- Express v5
- MongoDB & Mongoose
- AES-256-GCM Encryption
- Argon2id Password Hashing
- Helmet for TrustVault.
- Rate Limiter Flexible
- Chrome Manifest V3 Extension
- Firefox Browser Extension
- Zod v4
- Lucide Icons
- Zero-Trust Security Architecture
- Two-Tier MEK/DEK Encryption
- AES-256-GCM Credential Encryption
- Secure Browser Autofill
- Enterprise RBAC
- Secure Credential Sharing
- Audit Trail & Compliance Logging
- Zero-Downtime Key Rotation
- Enterprise Software Development
- Cybersecurity & Applied Cryptography
- Password Management Systems
- Zero-Trust Security Architecture
- AES-256-GCM Encryption
- Role-Based Access Control (RBAC)
- Browser Extension Development
- REST API Development
- React Development
- Node.js Backend Development
- MongoDB Database Design
- Audit Logging & Compliance
🛠️ Technologies Used:
📦 Highlights:
🔖 Skills:
🏗️ TrustVault Architecture & Engineering Impact:
This solution delivers a reliable, high-performance user experience through modular software architecture and structured design patterns. Specifically, the system separates presentation components from core business logic to maximize execution speed. Therefore, developers can maintain and extend the application without introducing regressions. Additionally, automated validation checks verify every user input before processing data. Consequently, the application maintains strong security and consistent responsiveness across both desktop and mobile environments.
In addition, the underlying codebase emphasizes clean modularity and long-term maintainability across every deployment environment. Specifically, each functional layer operates independently with clear data contracts and predictable state management. Therefore, future feature expansions require minimal refactoring or operational downtime. As a result, TrustVault serves as a dependable blueprint for modern production software.
Moreover, the platform incorporates clean design principles to simplify complex workflows for end users. For instance, interactive visual feedback guides users smoothly through every step of the process. Meanwhile, optimized asset loading minimizes latency during peak traffic periods. Furthermore, additional open-source modules and engineering references are available on GitHub. Finally, to discuss custom full-stack software solutions or explore similar builds, visit the contact page or browse the complete engineering portfolio.


Sri Lanka Holidays SDK
A lightweight, zero-dependency, multi-language open-source SDK providing official Sri Lanka Public, Bank, and Mercantile Holidays (including Full Moon Poya Days) for 2026 and 2027. Powered by a single canonical JSON dataset and published across 7 major language ecosystems (Node.js/TypeScript, PHP & Laravel, .NET/C#, Rust, Go, Python, and Flutter/Dart) to power HR, payroll, banking, and enterprise scheduling platforms.
Zellers AI Avurudu Avatar Platform
Zellers AI Avurudu Avatar Platform is an end-to-end interactive digital campaign web application engineered for Zellers Chocolates to celebrate Sri Lanka's Sinhala & Tamil New Year. It pioneered Sri Lanka’s first AI Avurudu Kumara & Kumariya competition by transforming user portraits into high-fidelity traditional cultural avatars via a guided multi-step journey. Built with Next.js 16, React 19, Node.js, Express, and MongoDB, the system features a dual-channel OTP verification engine (SMS160 and WhatsApp API) with bcrypt hashing and rate limiting. Authenticated users complete an interactive cultural quiz matched to Zellers chocolate flavors, submit their portraits to an AI avatar generation pipeline, and participate in a tamper-resistant public voting gallery equipped with MongoDB aggregation leaderboards and full GA4/GTM/Clarity analytics telemetry.

Maliban Uththama Pranama
Maliban Uththama Pranama (මැලිබන් උත්තම ප්රණාම) is a full-stack, mobile-first wheelchair reservation and ground-dispatch management system developed for Maliban’s flagship CSR pilgrimage initiative during the sacred Poson Poya festival in Sri Lanka. Engineered to streamline mobility assistance for thousands of elderly and differently-abled pilgrims, the platform coordinates end-to-end logistics across high-density pilgrimage zones with zero paper overhead. Built with Next.js (App Router), TypeScript, and Tailwind CSS on the frontend and an Express/Firebase infrastructure on the backend, the system integrates SMS OTP authentication via the Text.lk API, localized bilingual support (Sinhala & English), and offline-capable PWA capabilities. Onsite ground agents utilize an integrated camera-based QR code scanner (`html5-qrcode`) for contactless validation—handling real-time dispatch, 45-minute session timeout tracking, and safe inventory return—while an administrative suite provides live fleet monitoring, slot quota allocation, and pilgrimage traffic analytics.
Next project
