Building vaultctl: the password vault where my own server can't read your passwords
A self-hosted, zero-knowledge password vault. One Go binary, three clients, one constraint that quietly shaped every other decision in the codebase.
gocryptographyzero-knowledgeself-hostingopen-sourcejourney