Skip to content
Workflowgila

Gila

A cross-platform password manager with zero-knowledge encryption, biometric auth, and a Chrome extension with WebSocket bridge for automatic credential capture and auto-fill.

stack

  • Rust
  • Tauri
  • React
  • TypeScript
← All projects
Architecture
  • AES-GCM-256 — each vault entry encrypted individually with a unique nonce; master key never leaves the Rust process
  • Argon2id key derivation — tuned memory cost, parallelism, and iterations to resist brute force on a stolen vault file
  • Secure memory wiping — zeroize crate zeroes sensitive data on drop
  • Chrome extension over local WebSocket — captures credentials and auto-fills with strict domain and email matching
  • Per-session WebSocket token — shared-secret handshake, exchanged via one-time native messaging, blocks rogue local processes
  • Biometric unlock with grace period — Linux PAM or Windows Hello; vault stays unlocked for a configurable window
Results
  • Zero-knowledge architecture — no server, no cloud
  • Biometric auth on Linux (PAM) and Windows (Hello)
  • System tray background mode with clipboard auto-clear after 30 seconds
  • Strict domain matching blocks phishing via lookalike domains
Action · Send message

Hiring for a remote AI engineering role?

Contact me