IronDome — Fortified password vault with TUI, AES-256 encryption, biometric auth, and zero-knowledge architecture
Project description
Fortified Password Vault — TUI | AES-256 | Zero-Knowledge | Biometric
Your bunkers. Your machine. Your rules.
IronDome encrypts everything locally with AES-256, binds keys to your hardware, and operates on a zero-knowledge model. Full terminal UI. Unlock with Touch ID, Windows Hello, or fingerprint. Nothing leaves your device. Ever.
Quick Start
pip install IronDome
irondome
Two commands. Full TUI launches — splash screen, biometric auth, dashboard, vault browser, password generator.
First-time setup:
irondome-cli create bunker
irondome
Security
- AES-256-CBC encryption via Fernet
- PBKDF2-HMAC-SHA256 with 600,000 iterations (OWASP 2023)
- Zero-knowledge — master password never stored
- Hardware-bound keys tied to your machine identity
- Biometric auth — Touch ID (macOS), Windows Hello, fprintd (Linux)
- Two-factor mode — biometric gate + master password
- 24-word recovery phrase (BIP-39 format)
- Adaptive lockout — progressive brute-force protection
- 30-minute sessions with auto-lock
Terminal UI
IronDome's primary interface is a full Terminal UI built with Textual:
- 12 screens — splash, login, dashboard, vault, detail, generator, save, settings, backup, status, help, confirm
- Keyboard-driven — arrows, Tab, Enter, Esc, hotkeys for every action
- Command palette — Ctrl+P fuzzy search across all commands
- Military aesthetic — dark theme, dome green, amber warnings, red threats
- Security controls — masked input, alternate screen buffer, clipboard auto-clear (30s), signal handlers, memory protection
CLI Mode
For scripts and automation:
irondome-cli create bunker # First-time setup
irondome-cli open airspace # Authenticate (30-min session)
bunker create # Quick-create password entry
bunker open # List all entries
bunker open github # Search by name
bunker fortify # Encrypted backup
irondome-cli close airspace # Lock everything
Cross-Platform
| Platform | Biometric | Status |
|---|---|---|
| macOS | Touch ID | Full support |
| Windows | Windows Hello | Full support |
| Linux | fprintd (fingerprint) | Full support |
| SSH | Password fallback | Works |
IronDome vs Cloud Managers
| IronDome | Cloud Managers | |
|---|---|---|
| Data | Your machine only | Their servers |
| Network | Never | Always |
| Zero knowledge | True — no server | "Trust us" |
| Hardware binding | Keys tied to machine | No |
| Open source | GPL-3.0 | Rarely |
| Cost | Free | $3-5/month |
Links
License
GPL-3.0 — free to use, modify, distribute. Derivatives must remain open source.
Created by King Hippopotamus
No servers. No cloud. No compromise.
Project details
Release history Release notifications | RSS feed
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Filter files by name, interpreter, ABI, and platform.
If you're not sure about the file name format, learn more about wheel file names.
Copy a direct link to the current filters
File details
Details for the file irondome-3.0.3.tar.gz.
File metadata
- Download URL: irondome-3.0.3.tar.gz
- Upload date:
- Size: 66.1 kB
- Tags: Source
- Uploaded using Trusted Publishing? Yes
- Uploaded via: twine/6.1.0 CPython/3.13.7
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
dc5cdd1e34e42ea7db03f1ed2cc349192ca2f638cdc0e2e05e6eb28e32c042cc
|
|
| MD5 |
b3845159b5e38f08697309d8dc4ef90b
|
|
| BLAKE2b-256 |
65d2037fcbb198662c229e610dd861323181a5601c7e67ebb5408a1b8ea52595
|
Provenance
The following attestation bundles were made for irondome-3.0.3.tar.gz:
Publisher:
publish.yml on TheKingHippopotamus/IronDome-Bunker
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
irondome-3.0.3.tar.gz -
Subject digest:
dc5cdd1e34e42ea7db03f1ed2cc349192ca2f638cdc0e2e05e6eb28e32c042cc - Sigstore transparency entry: 1203563086
- Sigstore integration time:
-
Permalink:
TheKingHippopotamus/IronDome-Bunker@28b64b5ca7e9d8bdf3d84e9b3beab94192f75eb3 -
Branch / Tag:
refs/heads/main - Owner: https://github.com/TheKingHippopotamus
-
Access:
public
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
publish.yml@28b64b5ca7e9d8bdf3d84e9b3beab94192f75eb3 -
Trigger Event:
push
-
Statement type:
File details
Details for the file irondome-3.0.3-py3-none-any.whl.
File metadata
- Download URL: irondome-3.0.3-py3-none-any.whl
- Upload date:
- Size: 82.6 kB
- Tags: Python 3
- Uploaded using Trusted Publishing? Yes
- Uploaded via: twine/6.1.0 CPython/3.13.7
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
de47fcec5c73cd79618762947ebafab40da223ed8600f59175527e721b72865d
|
|
| MD5 |
1aa0e291eb0df69cd4c2cad06a6fd7cd
|
|
| BLAKE2b-256 |
addff00f88807fcd1c2a302559bb03a2d1c1430514553b17cf738650386fa43f
|
Provenance
The following attestation bundles were made for irondome-3.0.3-py3-none-any.whl:
Publisher:
publish.yml on TheKingHippopotamus/IronDome-Bunker
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
irondome-3.0.3-py3-none-any.whl -
Subject digest:
de47fcec5c73cd79618762947ebafab40da223ed8600f59175527e721b72865d - Sigstore transparency entry: 1203563090
- Sigstore integration time:
-
Permalink:
TheKingHippopotamus/IronDome-Bunker@28b64b5ca7e9d8bdf3d84e9b3beab94192f75eb3 -
Branch / Tag:
refs/heads/main - Owner: https://github.com/TheKingHippopotamus
-
Access:
public
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
publish.yml@28b64b5ca7e9d8bdf3d84e9b3beab94192f75eb3 -
Trigger Event:
push
-
Statement type: