Bl4cksmith
Joined 4 years ago
Karma
4
Submissions
11
Member since
Oct 13
Recent submissions
Comment · 6 days ago
Comment · 10 days ago
Not a bad question at all, no worries.
When you save your password on your PC, the password is saved into an encrypted store that is physically on that PC, and to get it to your phone you need to have the application (be it web or native android) open and your vault unlocked so that the two can synchronize.
What I do is to prepare the phone vault by unlocking it and synchronizing right away as I make changes if something is critical.
That is the trade-off when it comes to convenience as compared to something like BitWarden, for example. There the credentials are stored in a centralized database that your PC or phone can reach independently of each other.
EDIT: More details here: https://www.cryptex-vault.com/docs/synchronization
Comment · 10 days ago
I understand you and I feel the same way. I am currently working with a couple of people that are well-versed in this space so that we can get more eyes, and a proper security audit for the whole codebase in the following year.
You can follow progress here: https://www.cryptex-vault.com/security
Comment · 3 years ago
Not at the moment, keeping it simple for now. That being said, I'm very interested in IPFS and the capabilities that can be attained from implementing it. I am very open to ideas, though - feel free to suggest anything you think would be helpful or handy to have!
Comment · 3 years ago
Hi, the project is not open source yet. I'd like to decouple the application itself from the backend code that handles the Stripe integration, emails and other application irrelevant functionality first - then open source it and get more eyes on the code. Hypothetically, if the whole back-end was open source ATM - you could run it locally or somewhere like on Vercel - with no problems, you'd just need to set the ENV variables for things like Stripe and other services to an empty value.
I'd say that the most important part of the infrastructure is the signaling server (websocket server), and the STUN/TURN server used in WebRTC connection forming.
One interesting fact about the currently running application; the application itself is client-side rendered. If you would download the application bundle that you get when you open the application in your browser, you could use it if you would mock networking requests - this would basically simulate the way it works now when the PWA is offline. With the application being client-side rendered - every user gets the same code.
Comment · 3 years ago
Forgot to mention; the application itself https://www.cryptex-vault.com/app is a PWA - meaning, android (chrome, firefox) or iOS (Safari) will let you install it and use it as a standalone application.
Comment · 3 years ago
Hi, yes, I understand - there are no extension or mobile clients available yet. Wanted to see if people would actually be interested in this kind of product before committing to that kind of development. Thank you for the feedback!
Comment · 4 years ago
Some might call it a password manager, but different :).
A couple of friends and I started working on this and would like some feedback.
Tell me what you think!
If there's anything you need help with, just let me know - I'll do my best to help in any way I can :)