Show HN: CarryPass – Zero-knowledge, offline password manager (PWA)
2 gosacevvdmbnvk 1 5/25/2025, 12:18:04 PM carrypass.net ↗
CarryPass is a privacy-first password manager that works entirely in your browser.
Zero-knowledge, no storage: everything is generated deterministically using Argon2 + PBKDF2 + AES-CTR
Vaults (admin, member, team) are encrypted with AES-GCM
No sync, no telemetry, no backend – it's all client-side
TOTP-based onboarding for teams
Built as a PWA, works offline on any device
Open source: https://github.com/racz-zoltan/racz-zoltan.github.io
Would love feedback from the HN community on the crypto model, UX, and real-world use.
How it works: - Passwords are generated deterministically from service name + master password + user-configured strength using Argon2 + PBKDF2 + AES-CTR - Vaults (team, admin, member) are encrypted using AES-GCM, fully client-side - No cloud, no sync, no telemetry — everything runs in your browser as a PWA - Team configs can be distributed securely with TOTP-based onboarding and QR support
Demo: https://carrypass.net Source: https://github.com/racz-zoltan/racz-zoltan.github.io
Would love your feedback — especially from the HN crowd — on the cryptographic design, UX, or suggestions for improving the onboarding experience.