Kee Vault is a password manager for your web browser. Password databases (Vaults) are encrypted using the KeePass storage format before being sent to a remote server for synchronisation purposes.

This is the bulk of the user-visible part of Kee Vault app, based on a heavily modified fork of KeeWeb. To see the complete picture of what source code executes in the browser (and hence verify that sensitive data is protected) you'll need to look at some of the npm dependencies too:

• kee-frontend: Offers a simplified API for interacting with the hosted Kee Vault service.
• kdbx-placeholders: Enables support for KeePass placeholders.
• kprpc: A KeePassRPC server for the KeePassRPC client within the Kee browser extension to connect to.

Obviously all npm dependencies in the project impact upon the behaviour of the app but we highlight those above since they are the ones authored by the Kee Vault team and hence would be the place to find any funny business on our part.

We aim for the project to be compatible with all browsers released in 2018 or later. Most modern browsers and devices will have already automatically updated to versions that support Kee Vault and many browsers from 2017 or earlier will also work, although we make no effort to validate this.

In future we may further increase the requirement to even newer browsers if we decide that failing to do so will put users of older browsers at a significantly increased risk. However, we'll try to introduce most features in a way that gracefully degrades the experience for users that are stuck on the "current modern".

npm install
mkdir cert
openssl req \
    -newkey rsa:2048 \
    -x509 \
    -nodes \
    -keyout cert/server.key \
    -new \
    -out cert/server.crt \
    -subj /CN=app-dev.kee.pm \
    -reqexts SAN \
    -extensions SAN \
    -config <(cat /usr/lib/ssl/openssl.cnf \
        <(printf '[SAN]\nsubjectAltName=DNS:app-dev.kee.pm')) \
    -sha256 \
    -days 3650

npm start

AGPL3 with permitted extra clauses