vault

vault.0x6a03448f4d.com is a small toolkit for password and secret hygiene. The whole idea is simple: it runs entirely in your browser, so there is no server to trust with your secrets.

Like the rest of this portfolio, I built it with a lot of help from AI. The idea and the security decisions are mine; the tool is what came out of that.

What it does

• Analyze a password locally and see a real entropy estimate and crack-time.
• Generate passphrases and passwords with the browser's secure random generator.
• Breach check a password against Have I Been Pwned.

The part I like most

The breach check never sends your password. It hashes it in your browser and sends only the first five characters of that hash to the Have I Been Pwned range API, then compares the rest locally. This is called k-anonymity. Your password, and even its full hash, never leave your device.

Why no backend

There is no server holding secrets, so there is nothing to breach and nothing to leak. The only network request the whole app makes is that five-character hash prefix. That is the entire point.

Try it: vault.0x6a03448f4d.com