A cross-platform secure password manager with layered encryption, built with HTML, CSS, JavaScript, and PyWebView. All encryption happens locally on your device—your data never leaves your computer.
| Feature | Description |
|---|---|
| 🔒 Layered Password Protection | Multi-layer security with master password + PIN authentication |
| 🤖 CAPTCHA Verification | Built-in CAPTCHA to prevent unauthorized access attempts |
| 🎨 Customizable Themes | Multiple theme options to personalize your experience |
| 🔐 Local Encryption | AES-256-GCM encryption with random salts—no cloud storage |
| ⚡ High-Iteration Hashing | PBKDF2-SHA256 with 100,000+ iterations for maximum security |
| 💾 Offline-First | Works completely offline—no internet connection required |
| 📱 Cross-Platform | Windows (.exe), macOS (.dmg), Linux (.deb), and Android (.apk) |
| 🎯 Zero Telemetry | No tracking, no analytics, no ads—complete privacy |
| ⚙️ Password Generator | Create strong, random passwords with customizable options |
| 🔄 Sync-Ready | Architecture supports future encrypted sync capabilities |
- HTML5 - Semantic markup and structure
- CSS3 - Responsive design with custom themes
- JavaScript (ES6+) - Core application logic and encryption
- PyWebView - Cross-platform desktop application wrapper
- Python 3.8+ - Backend services and file management
- PyInstaller - Executable packaging for all platforms
- Web Crypto API - AES-256-GCM encryption
- PBKDF2-SHA256 - Key derivation with high iteration count
- Random Salt Generation - Unique salts for each encryption operation
- PyInstaller - Bundle Python + HTML/CSS/JS into executables
- Inno Setup - Windows installer (.exe)
- Linux Packaging - DEB/RPM support
- APK Tooling - Android package generation
User Master Password
↓
[PBKDF2-SHA256]
(100,000+ iterations)
↓
Derived Key (256-bit)
↓
[AES-256-GCM Encryption]
↓
Encrypted Vault (Local Storage)
└─ Never transmitted over network
└─ Only stored locally on device
🔐 Master Password Protection
- Password hashed using PBKDF2-SHA256 with 100,000+ iterations
- Random 16-byte salt generated for each password
- Salt stored alongside encrypted data
🤖 Multi-Factor Verification
- Primary authentication via master password
- Secondary verification through CAPTCHA challenge
- Optional PIN code protection layer
💾 Local-First Encryption
- All encryption/decryption happens in the browser using Web Crypto API
- Python backend never sees plaintext passwords
- Encrypted data stored in
vibipass_data/store.jsonon your device
🔄 Random Salt Implementation
- Unique random salt generated for each credential entry
- Prevents rainbow table attacks
- Salt securely stored with encrypted credentials
⚡ High-Entropy Key Derivation
- PBKDF2 with 100,000+ iterations to slow down brute-force attacks
- Configurable iteration count for future security updates
- SHA-256 hash function for maximum security
🛡️ Zero-Knowledge Architecture
- No server-side processing of passwords
- No transmission of sensitive data
- Complete offline capability
Option 1: Installer (Recommended)
- Download
VibiPass_Setup_1.0.exefrom Releases - Run the installer
- Follow the setup wizard
- Launch VibiPass from your Start Menu
Option 2: Portable
- Download
VibiPass_windows.zip - Extract to your desired location
- Run
VibiPass.exe
- Download
VibiPass_1.0.dmgfrom Releases - Open the
.dmgfile - Drag VibiPass.app to Applications folder
- Launch from Applications or Spotlight search
Note: If you see a Gatekeeper warning, right-click the app and select "Open"
Ubuntu, Debian, Linux Mint:
sudo dpkg -i vibipass_1.0_amd64.deb
vibipassFedora/RHEL/CentOS:
sudo rpm -i vibipass_1.0_x86_64.rpm
vibipassPortable (Any Distribution):
tar -xzf VibiPass_linux.tar.gz
./VibiPass/VibiPass- Enable "Unknown Sources" in Settings → Security
- Download
VibiPass_1.0.apkfrom Releases - Tap the APK file to install
- Launch from your app drawer
- Python 3.8 or higher
- pip package manager
- Git
git clone https://github.com/spookyminecraftgamer-dot/VibiPass.git
cd VibiPass
pip install -r requirements.txtpython main.pyLinux:
chmod +x build_linux.sh
./build_linux.shWindows:
build_windows.batmacOS:
chmod +x build_macos.sh
./build_macos.shVibiPass/
├── main.py # PyWebView entry point
├── requirements.txt # Python dependencies
├── build_linux.sh # Linux build script
├── build_windows.bat # Windows build script
├── build_macos.sh # macOS build script
├── vibipass.spec # PyInstaller configuration
├── vibipass_installer.iss # Windows installer config
├── html/ # Frontend application
│ ├── landing.html
│ ├── signup.html
│ ├── auth.html
│ ├── cred.html
│ └── settings.html
├── assets/ # UI assets
│ ├── theme/ # Theme files
│ └── icons/ # Application icons
└── vibipass_data/ # User data storage (auto-created)
└── store.json # Encrypted vault
- ✅ Core password management
- ✅ AES-256-GCM encryption
- ✅ Layered authentication
- ✅ CAPTCHA verification
- 🚧 Theme customization
- 🚧 Android app optimization
- Password strength indicator
- Import/Export functionality
- Auto-fill browser integration
- Biometric authentication (fingerprint/face)
- Dark mode improvements
- End-to-end encrypted cloud sync (optional)
- Mobile app refinements
- Advanced search & filtering
- Multi-vault support
- Duplicate password detection
- Cross-device sync with end-to-end encryption
- Team vault sharing (enterprise)
- Advanced audit logging
- API for third-party integrations
- Hardware security key support
We welcome contributions! Whether it's bug fixes, feature requests, or documentation improvements:
- Fork this repository
- Create a feature branch (
git checkout -b feature/AmazingFeature) - Commit your changes (
git commit -m 'Add AmazingFeature') - Push to the branch (
git push origin feature/AmazingFeature) - Open a Pull Request
- Follow PEP 8 for Python code
- Use consistent naming conventions
- Add comments for complex logic
- Test on multiple platforms before submitting
Found an issue? We'd love to hear about it!
- Report a Bug: GitHub Issues
- Feature Request: GitHub Discussions
- Email: [security concerns only]
If you discover a security vulnerability, please email us privately instead of using the issue tracker.
VibiPass is licensed under the MIT License. See the LICENSE file for details.
MIT License
Copyright (c) 2026 spookyminecraftgamer-dot
Permission is hereby granted, free of charge, to any person obtaining a copy
of this software and associated documentation files (the "Software"), to deal
in the Software without restriction, including without limitation the rights
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
copies of the Software, and to permit persons to whom the Software is
furnished to do so, subject to the following conditions:
The above copyright notice and this permission notice shall be included in all
copies or substantial portions of the Software.
- Privacy First - Your passwords stay on your device
- Military-Grade Encryption - AES-256-GCM security
- Completely Free - Open source with no premium features locked behind paywalls
- Works Offline - No internet required
- Multiple Platforms - Seamless experience across Windows, macOS, Linux, and Android
- Active Development - Regular updates and security improvements
- GitHub Issues: For bug reports and feature requests
- GitHub Discussions: For questions and community discussions
- Star the Repo: Show your support by starring ⭐
Built with ❤️ using:
- PyWebView for desktop integration
- Web Crypto API for encryption
- The open-source community for inspiration and support
Stay secure. Stay private. Use VibiPass. 🔐