Skip to main content

IronDome — Fortified password vault with TUI, AES-256 encryption, biometric auth, and zero-knowledge architecture

Project description

IronDome

Fortified Password Vault — TUI | AES-128-CBC | Zero-Knowledge | Biometric

PyPI Python Downloads License Stars

macOS Windows Linux Textual


Your bunkers. Your machine. Your rules.

IronDome encrypts everything locally with AES-128-CBC (Fernet), derives keys from machine identity, and operates on a zero-knowledge model. Full terminal UI. Unlock with Touch ID, Windows Hello, or fingerprint. Nothing leaves your device. Ever.

Quick Start

pip install IronDome
irondome

Two commands. Full TUI launches — splash screen, biometric auth, dashboard, vault browser, password generator.

First-time setup:

irondome-cli create bunker
irondome

Security

  • AES-128-CBC encryption via Fernet
  • PBKDF2-HMAC-SHA256 with 600,000 iterations (OWASP 2023)
  • Zero-knowledge — master password never stored
  • Machine-specific keys derived from machine identity
  • Biometric auth — Touch ID (macOS), Windows Hello, fprintd (Linux)
  • Two-factor mode — biometric gate + master password
  • 24-character recovery code (XXXX-XXXX-XXXX-XXXX-XXXX-XXXX format)
  • Adaptive lockout — progressive brute-force protection
  • 30-minute sessions with auto-lock

Terminal UI

IronDome's primary interface is a full Terminal UI built with Textual:

  • 12 screens — splash, login, dashboard, vault, detail, generator, save, settings, backup, status, help, confirm
  • Keyboard-driven — arrows, Tab, Enter, Esc, hotkeys for every action
  • Command palette — Ctrl+P fuzzy search across all commands
  • Military aesthetic — dark theme, dome green, amber warnings, red threats
  • Security controls — masked input, alternate screen buffer, clipboard auto-clear (30s), signal handlers, memory protection

CLI Mode

For scripts and automation:

irondome-cli create bunker       # First-time setup
irondome-cli open airspace       # Authenticate (30-min session)
bunker create                    # Quick-create password entry
bunker open                      # List all entries
bunker open github               # Search by name
bunker fortify                   # Encrypted backup
irondome-cli close airspace      # Lock everything

Cross-Platform

Platform Biometric Status
macOS Touch ID Full support
Windows Windows Hello Full support
Linux fprintd (fingerprint) Full support
SSH Password fallback Works

IronDome vs Cloud Managers

IronDome Cloud Managers
Data Your machine only Their servers
Network Never Always
Zero knowledge True — no server "Trust us"
Hardware binding Keys derived from machine identity No
Open source GPL-3.0 Rarely
Cost Free $3-5/month

Links

License

GPL-3.0 — free to use, modify, distribute. Derivatives must remain open source.


Created by King Hippopotamus
No servers. No cloud. No compromise.

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

irondome-3.1.1.tar.gz (74.9 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

irondome-3.1.1-py3-none-any.whl (92.4 kB view details)

Uploaded Python 3

File details

Details for the file irondome-3.1.1.tar.gz.

File metadata

  • Download URL: irondome-3.1.1.tar.gz
  • Upload date:
  • Size: 74.9 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? No
  • Uploaded via: twine/6.2.0 CPython/3.9.6

File hashes

Hashes for irondome-3.1.1.tar.gz
Algorithm Hash digest
SHA256 ec2243bcaa587d945606b36d6f0aa274999fcef6b8f6641894aa896f5c03a724
MD5 37155767a0837381fa0369fe3c08fab9
BLAKE2b-256 500f10d622b1b83dadee5eed8475c5c6d1410684552dee5b96ceb7d7b17ed34a

See more details on using hashes here.

File details

Details for the file irondome-3.1.1-py3-none-any.whl.

File metadata

  • Download URL: irondome-3.1.1-py3-none-any.whl
  • Upload date:
  • Size: 92.4 kB
  • Tags: Python 3
  • Uploaded using Trusted Publishing? No
  • Uploaded via: twine/6.2.0 CPython/3.9.6

File hashes

Hashes for irondome-3.1.1-py3-none-any.whl
Algorithm Hash digest
SHA256 f02294f368a1c46898fdccf1579df86d266505d5c8e9bbb029ab85501c7de369
MD5 3f0b0753c5951d9bdb54358c3322783c
BLAKE2b-256 05ae643c77e687456ddae953f62b13c1fcbdc27bd79c15645f27fc17b006b874

See more details on using hashes here.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page