keeweb/keeweb
Keeweb
KeeWeb is a web-based password manager and vault that allows users to open and edit encrypted databases through a browser interface. It functions as a cross-platform tool for managing password vaults using the KeePass database format.
The application provides a self-hosted password vault that can be deployed as a single HTML file or via Docker. It integrates with remote storage providers using OAuth to synchronize encrypted database files across multiple devices.
The system includes capabilities for secure credential generation, two-factor authentication management through time-based one-time passwords, and biometric database unlocking. It also supports the use of hardware security keys and keyfiles to protect encrypted data.
The software can be deployed as a container or a standalone web application.
Features
- KeePass Database Compatibility - Implements the XML-based KeePass database specification for cross-platform vault compatibility.
- Encrypted Database Managers - Provides a full interface for creating and managing password-protected databases using the KeePass format.
- KeePass Database Managers - Implements a full interface for managing encrypted password vaults compatible with the KeePass specification.
- XML Parsing - Implements XML parsing to read and write the KeePass database format.
- Password Vaults - Provides a secure vault for managing and storing sensitive credentials through a web interface.
- Cloud-Synced Managers - Utilizes cloud services and OAuth to ensure encrypted password databases are synchronized across multiple devices.
- Web-Based Password Vaults - Allows users to open and edit encrypted password databases through a web browser interface.
- Cloud Synchronization Services - Synchronizes encrypted password databases across devices using remote cloud storage providers via OAuth.
- Client-Side Decryption - Implements client-side decryption to ensure the master password is never transmitted to the server.
- Media Decryption - Decrypts database files entirely within the browser to ensure the server never accesses the master password.
- Synced Credential Vaults - Integrates with remote storage providers via OAuth to synchronize encrypted password files across devices.
- Credential Managers - Includes a programmable auto-type system to automatically input credentials into external browser fields.
- Credential Vaults - Provides secure storage and management for sensitive credentials, tokens, and secrets within encrypted vaults.
- Self-Hosted Password Managers - Offers a private server application for the encrypted storage and synchronization of credentials.
- Password Generators - Generates cryptographically secure random passwords using customizable character ranges and patterns.
- Password Management - Functions as a cross-platform application for managing encrypted password vaults using the KeePass database format.
- Web Crypto API Integrations - Uses browser-native cryptographic primitives to handle encryption and decryption of vault data.
- Cloud Storage Integrations - Integrates with remote cloud storage services to synchronize encrypted password databases.
- Docker Container Deployments - Packages the vault application as a Docker image for consistent installation across different hosting environments.
- Docker-Based Deployment Tools - Supports installation and hosting on private servers using Docker-based containerization.
- Containerized Application Deployments - Ships with pre-built Docker images to allow the application to be deployed in isolated container environments.
- Self-Hosted Applications - Can be deployed as a standalone HTML file or a container on private hardware for full data ownership.
- Biometric Authentication - Uses system biometric sensors to unlock encrypted databases without requiring a manual password.
- Keyfile Authentication - Increases security by requiring a physical keyfile and a master password to unlock the encrypted vault.
- Hardware Authentication - Integrates physical security keys using OATH or Challenge-Response modes to strengthen authentication.
- OAuth Authentication - Uses OAuth 2.0 tokens for secure authentication with third-party cloud storage providers.
- One-Time Passwords - Generates and stores time-based one-time passwords (TOTP) to provide multi-factor authentication.
- Breach Detection - Checks passwords against known breach databases to identify and warn about weak credentials.
- Password Generators - Creates high-entropy random passwords to ensure account security.
- Two-Factor Authentication - Generates time-based one-time passwords (TOTP) to provide an extra layer of account security.
- Plugin Extenders - Adds new capabilities and language translations through a modular plugin system.
- Modular Plugin Architectures - Provides a modular plugin architecture that allows extending core functionality at runtime.
- Plugin-Based Architectures - Loads external JavaScript modules at runtime to add new features and language translations.
- Single-File Distributions - Packages the entire application as a standalone HTML file for simple self-hosting and deployment.
- Password Management - Web-based password manager compatible with KeePass.
- Securitate și confidențialitate - Unofficial KeePass password manager.
