Vadnica-pass: A Password Manager from First Lines to Open Source

The Geselnik project ("Geselnik" is a word coined by Lumo, and I decided to adopt it 😀), or simply a Password Manager, started taking shape in 2021, while I was learning SQL databases. That was when I discovered AES-256 Military Grade encryption and began building the project — I have always learned best by building real projects along the way.

At the same time, however, I was also working on my main platform vadnica.org, so I focused on developing that instead, and the Password Manager was shelved indefinitely.

Now that vadnica.org is finished, it was time to continue with the project. With the help of modern AI tools, I completed the project fairly quickly — I use Proton Lumo and JetBrains Junie.

🔐 What is vadnica-pass?

Vadnica-pass is a web-based password manager (geselnik) that runs in the browser and stores passwords, usernames, email addresses, 2FA codes, Wi-Fi details, and cards. Data is organized into categories — banks, online stores, email, networks, games, and others — and each entry can include additional fields alongside the password.

1. AES-256 encryption of sensitive data
2. Zero-knowledge architecture — the master password never reaches the server
3. TOTP support (2FA codes)
4. Password generator
5. Export to CSV and XML format (import into KeePass)
6. Trash — deleted entries are not immediately removed permanently
7. Dark and light mode
8. Bilingual interface (Slovenian / English)
9. Recovery key in case of a lost master password

🔒 What does zero-knowledge mean?

The master password is never sent to the server and is never stored there either. During registration, the password is only saved as an irreversible hash, from which the original password cannot be reconstructed. All sensitive content — passwords, email addresses, 2FA keys — is encrypted with AES-256 in the browser, before it is sent to the server. The server therefore only stores encrypted data, inaccessible even to administrators.

This means: if anyone emptied the database, they would only hold encrypted strings without the key. The only key is in the user's head.

📂 Open source

The project is published under the AGPL v3 license on GitHub, where anyone can view, download, and use the code: https://github.com/vadnica/vadnica-pass

Since encryption only makes sense if it can be verified, open source is a natural choice for a password manager. Anyone can check what the code does and what is sent to the server.

🚀 Live demo

The password manager is available for testing at: https://pass.vadnica.org

This is a test version: every created account is automatically deleted after three days. Please do not store real passwords or sensitive data in the demo version.

🛣️ What's next?

This is not the end. I intend to keep improving the project — among other things, with better management of large collections of entries and additional features. The password manager is part of the vadnica.org ecosystem, which also includes the learning platform and the blog, where I write about the technologies I use in development.