Passwort-Manager

The Password Manager app (/apps/passwords/) provides encrypted password storage and management.

Features

• Password vault — Store credentials (domain, username, password, notes)
• AES-256-CBC encryption — All passwords encrypted server-side with per-user keys
• PBKDF2 key derivation — Encryption keys derived via PBKDF2 for stronger protection v3.12
• Password generator — Generate strong passwords with configurable length and character sets using crypto.getRandomValues() v3.12
• Password strength indicator — Visual feedback on password quality
• Show/hide toggle — Reveal or mask stored passwords
• Copy to clipboard — One-click copy for usernames and passwords
• Search — Filter entries by domain or username
• CRUD operations — Add, edit, delete password entries

Password Generator v3.12

The built-in password generator creates cryptographically secure passwords:

• Uses crypto.getRandomValues() (Web Crypto API) for true randomness
• Configurable length and character types (uppercase, lowercase, digits, symbols)
• Generated password is automatically filled into the password field
• One-click regeneration for new passwords

Architecture

• Single-file PHP app (apps/passwords/index.php, ~500 lines)
• Database: niuton_passwords table (id, user_id, domain, username, password_encrypted, notes, timestamps)
• Encryption: AES-256-CBC via openssl_encrypt/openssl_decrypt, PBKDF2-derived per-user key
• API endpoints: list, add, update, delete via ?api=ACTION pattern
• CSRF protection on all POST requests