Skip to main content

IronDome — Fortified password vault with TUI, AES-256 encryption, biometric auth, and zero-knowledge architecture

Project description

IronDome

Fortified Password Vault — TUI | AES-128-CBC | Zero-Knowledge | Biometric

PyPI Python Downloads License Stars

macOS Windows Linux Textual


Your bunkers. Your machine. Your rules.

IronDome encrypts everything locally with AES-128-CBC (Fernet), derives keys from machine identity, and operates on a zero-knowledge model. Full terminal UI. Unlock with Touch ID, Windows Hello, or fingerprint. Nothing leaves your device. Ever.

Quick Start

pip install IronDome
irondome

Two commands. Full TUI launches — splash screen, biometric auth, dashboard, vault browser, password generator.

First-time setup:

irondome-cli create bunker
irondome

Security

  • AES-128-CBC encryption via Fernet
  • PBKDF2-HMAC-SHA256 with 600,000 iterations (OWASP 2023)
  • Zero-knowledge — master password never stored
  • Machine-specific keys derived from machine identity
  • Biometric auth — Touch ID (macOS), Windows Hello, fprintd (Linux)
  • Two-factor mode — biometric gate + master password
  • 24-character recovery code (XXXX-XXXX-XXXX-XXXX-XXXX-XXXX format)
  • Adaptive lockout — progressive brute-force protection
  • 30-minute sessions with auto-lock

Terminal UI

IronDome's primary interface is a full Terminal UI built with Textual:

  • 12 screens — splash, login, dashboard, vault, detail, generator, save, settings, backup, status, help, confirm
  • Keyboard-driven — arrows, Tab, Enter, Esc, hotkeys for every action
  • Command palette — Ctrl+P fuzzy search across all commands
  • Military aesthetic — dark theme, dome green, amber warnings, red threats
  • Security controls — masked input, alternate screen buffer, clipboard auto-clear (30s), signal handlers, memory protection

CLI Mode

For scripts and automation:

irondome-cli create bunker       # First-time setup
irondome-cli open airspace       # Authenticate (30-min session)
bunker create                    # Quick-create password entry
bunker open                      # List all entries
bunker open github               # Search by name
bunker fortify                   # Encrypted backup
irondome-cli close airspace      # Lock everything

Cross-Platform

Platform Biometric Status
macOS Touch ID Full support
Windows Windows Hello Full support
Linux fprintd (fingerprint) Full support
SSH Password fallback Works

IronDome vs Cloud Managers

IronDome Cloud Managers
Data Your machine only Their servers
Network Never Always
Zero knowledge True — no server "Trust us"
Hardware binding Keys derived from machine identity No
Open source GPL-3.0 Rarely
Cost Free $3-5/month

Links

License

GPL-3.0 — free to use, modify, distribute. Derivatives must remain open source.


Created by King Hippopotamus
No servers. No cloud. No compromise.

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

irondome-3.1.0.tar.gz (71.9 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

irondome-3.1.0-py3-none-any.whl (90.0 kB view details)

Uploaded Python 3

File details

Details for the file irondome-3.1.0.tar.gz.

File metadata

  • Download URL: irondome-3.1.0.tar.gz
  • Upload date:
  • Size: 71.9 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/6.1.0 CPython/3.13.7

File hashes

Hashes for irondome-3.1.0.tar.gz
Algorithm Hash digest
SHA256 8e23659464197d50b648083e1e79eb6c620c5789f4bd223d196ca4cec769a114
MD5 10306005c92c8fdcf325e124df9bed74
BLAKE2b-256 0105f31eb44e8e2ecc894fa441f68ae68471aadccfd45e496382a97bc94f8ebd

See more details on using hashes here.

Provenance

The following attestation bundles were made for irondome-3.1.0.tar.gz:

Publisher: publish.yml on TheKingHippopotamus/IronDome-Bunker

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file irondome-3.1.0-py3-none-any.whl.

File metadata

  • Download URL: irondome-3.1.0-py3-none-any.whl
  • Upload date:
  • Size: 90.0 kB
  • Tags: Python 3
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/6.1.0 CPython/3.13.7

File hashes

Hashes for irondome-3.1.0-py3-none-any.whl
Algorithm Hash digest
SHA256 b7cc7c524879168ff2218da7f742f639df35e90d726cb72143540bf603c46768
MD5 676b0959047c3186435c6b00b15f9e40
BLAKE2b-256 e40b7da4dc4f8aef9ae82410cd06bb2418c064bf9e1d7a31cc9a679d94cb17f2

See more details on using hashes here.

Provenance

The following attestation bundles were made for irondome-3.1.0-py3-none-any.whl:

Publisher: publish.yml on TheKingHippopotamus/IronDome-Bunker

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page