A password manager that never phones home — Rust core, encrypted local vault, zero cloud dependency.
Every mainstream password manager is someone else's database with a subscription attached. The vault — the most sensitive file a person owns — lives on infrastructure they don't control, reachable by anyone who breaches it. The requirement was simple to state and hard to build: a vault that never leaves the disk, unlocks with hardware biometrics, and still autofills in the browser like the cloud products do.
A Rust core owns cryptography and storage; a Tauri + Svelte shell renders it. The browser extension talks to the desktop app over native messaging — no local server, no open port. Windows Hello is an optional extra unlock; the master password always works.
A six-area whole-codebase security audit shipped 16 fixes. Entry secrets — password, notes, TOTP seed, custom fields — zeroize on drop so they don't linger in memory. Plaintext reveals are rate-limited to block bulk exfiltration. The extension confirms nonces, matches the HTTPS scheme, and checks the message sender before it will fill anything.