Documentation
Passflares is a secure, client-side encrypted password manager built on the Cloudflare stack. Your master password never leaves your device — all encryption and decryption happens in your browser.
Getting started
Create your account, log in, manage your session and master password, and keep your account secure.
Open guide arrow_forward lockVaults
Create vaults, add and manage password entries, search, copy credentials, and save your data.
Open guide arrow_forward groupsOrganisations
Create organisations, manage members and roles (Member / Admin / Owner), and share vaults with your team.
Open guide arrow_forward shieldAdmin reference
Infrastructure, secrets setup, database migrations, audit logs, and security best practices.
Open guide arrow_forwardHow Passflares keeps you safe
- Client-side encryptionVault data is encrypted with AES-256-GCM using a key derived from your master password before it leaves your browser.
- Zero-knowledge serverThe server stores only encrypted blobs. It cannot read your passwords.
- Scrypt password hashingYour master password is hashed server-side for authentication, keeping the derivation key separate from the auth credential.
- Short-lived sessionsYou are logged out automatically after 5 minutes of inactivity.
- Rate limitingFailed login attempts are rate-limited to prevent brute-force attacks.
- Audit loggingEvery sensitive action is logged for your security review.