craftedwebpro/vault-os

Vault OS is a Windows desktop application that creates a hidden, encrypted vault on your own computer for storing files you want kept private. Everything stays local. There is no cloud service, no account to create, and no internet connection required, so there is nothing for a company to lose in a data breach later. Unlocking a vault requires more than one factor. You enter a passphrase, then the app verifies your face through your webcam, checks for a double blink, and finally looks for a specific hand gesture only you would know. All four steps have to succeed before the vault opens. When you lock it again, the files inside are re-encrypted and the temporary workspace is wiped clean, so at any given moment the vault is either fully sealed or fully open, with nothing in between. You can create more than one vault, change your passphrase later, refresh your biometric data, and recover a vault from its folder if the app's own local state is ever lost. Under the hood, Vault OS is built with Flutter and Dart for the Windows interface, paired with a Python service that uses OpenCV, MediaPipe, and ONNX Runtime models to handle the face and gesture recognition. Encryption uses AES-256-GCM with a key derived from both your passphrase and your biometric data combined, so both are needed to decrypt anything. Setup is done either through a bundled installer that handles the Python packages and model files automatically, or by building from source, which requires installing Flutter, Visual Studio Build Tools, Python 3.10 or later, and separately downloading three model files that are not included in the repository because of their size and licensing. Only Windows is supported right now. The project is released under the PolyForm Noncommercial license, which allows personal use and learning from the code but restricts commercial use.