Skip to content

Come say hi

Drop me a line

lhernandez025cz@gmail.com

Career & updates

Where the code lives

Credits

Type
Instrument Serif · Geist
Motion
GSAP · Lenis
Stack
Next.js 16 · TypeScript
Source on GitHub
LittlePitza/portfolio
← Back to work

07/09 · Browser extension

Password Vault

Local password manager for Chrome and Edge. Envelope encryption with AES-256-GCM and scrypt derivation at twice the OWASP minimum; keys live only in the service worker.

Chrome & Edge
Role
AuthorCryptography
Stack
Manifest V3AES-256-GCMscryptTypeScript
Launch
2026
Status
Chrome & Edge
  • 216

    tests

  • 2×

    OWASP scrypt minimum

About the project

Envelope encryption: a master key derived with scrypt wraps per-entry data keys, so rotating the master never re-encrypts the vault.

Keys never touch the content script or storage in clear. The popup asks the service worker to decrypt on demand.