AliasVault

Disclaimer: This repository is currently in an alpha state and is NOT ready for production use. Critical features, such as encryption, are not yet fully implemented. AliasVault is a work in progress and as of this moment serves as a research playground. Users are welcome to explore and use this project, but please be aware that there are no guarantees regarding its security or stability. Use at your own risk!

AliasVault is an open-source password manager that can generate virtual identities complete with virtual email addresses. AliasVault can be self-hosted on your own server with Docker, providing a secure and private solution for managing your online identities and passwords.

Features

• Password Management: Securely store and manage your passwords.
• Virtual Identities: Generate virtual identities with virtual (working) email addresses that are assigned to one or more passwords.
• Zero-knowledge architecture: Ensures that all sensitive data is end-to-end encrypted on the client and stored in encrypted state on the database. The server never has access to your data.

Installation

1. Clone this repository.

# Clone this Git repository to "AliasVault" directory
$ git clone https://github.com/lanedirt/AliasVault.git

2. Run the init script to set up the .env file and generate a random encryption secret.

This script will create a .env file in the root directory of the project if it does not yet exist and populate it with a random encryption secret.

# Go to the project directory
$ cd AliasVault

# Make init script executable
$ chmod +x init.sh

# Run the init script
$ ./init.sh

3. Build and run the app via Docker:

# Build and run the app via Docker Compose
$ docker compose up -d --build --force-recreate

Note: the container binds to port 80 by default. If you have another service running on port 80, you can change the port in the docker-compose.yml file.

Note for first time build:

• When running the app for the first time, it may take a few minutes to build the Docker image.
• A SQLite database file will be created in ./database/aliasdb.sqlite. This file will store all (encrypted) password vaults. It should be kept secure and not shared.

After the Docker containers have started the app will be available at http://localhost:80

Tech stack / credits

The following technologies, frameworks and libraries are used in this project:

• C# - A simple, modern, object-oriented, and type-safe programming language.
• ASP.NET Core - An open-source framework for building modern, cloud-based, internet-connected applications.
• Entity Framework Core - A lightweight, extensible, open-source and cross-platform version of the popular Entity Framework data access technology.
• Blazor WASM - A framework for building interactive web UIs using C# instead of JavaScript. It's a single-page app framework that runs in the browser via WebAssembly.
• Docker - A platform for building, sharing, and running containerized applications.
• SQLite - A C-language library that implements a small, fast, self-contained, high-reliability, full-featured, SQL database engine.
• Tailwind CSS - A utility-first CSS framework for rapidly building custom designs.
• Flowbite - A free and open-source UI component library based on Tailwind CSS.
• Konscious.Security.Cryptography - A .NET library that implements Argon2id, a memory-hard password hashing algorithm.