🔐 GoPassSecure Password Manager

GoPassSecure is a lightweight, password manager written in Go. It securely derives encryption keys using Argon2id and encrypts passwords using AES-GCM before storing them locally in a SQLite database.

---

🚀 Features

• Account Management: Store and manage user accounts and platform credentials securely.
• Password Generator: Instantly generate strong, cryptographically secure random passwords.
• Authenticated Encryption: Encrypt plaintext data using AES-GCM with unique cryptographic salts.
• Safe Decryption: Decrypt stored credentials using your master password.
• Local Storage: SQLite-backed storage ensures simple, file-based persistence.

---

🛠️ Built With

• Language: 🐹 Go
• Key Derivation: 🧂 Argon2id (Random salt + Master password)
• Encryption Standard: 🔒 AES-GCM (Authenticated symmetric encryption)
• Database: 🗄️ SQLite

---

📂 Project Structure

├── database.go    # SQLite connection and database query operations
├── encrypt.go     # Argon2id key derivation and AES-GCM encryption/decryption functions
├── generator.go   # Secure random password generation logic
├── main.go        # CLI menu workflow and execution entry point
├── models.go      # Data structures (Account, Credentials)
├── go.mod         # Go module definition
├── go.sum         # Dependency checksums
└── README.md      # Project documentation

---

Start

1 :
# Clone the repository
git clone https://github.com/your-username/GoPassSecure.git

 
2 : 
# Navigate into the project directory
cd GoPassSecure

3:
# Download and tidy Go dependencies
go mod tidy

4 :
# Run the application
go run .

---

---

Disclaimer

GoPassSecure is an open-source project created strictly for educational and security research purposes. Although it uses industry-standard cryptographic primitives—including Argon2id for key derivation and AES-GCM for authenticated encryption—this software has not undergone an independent security audit.
Use this software at your own risk. It should not be used in production environments or relied upon to store sensitive, real-world credentials without a thorough code review and security validation. The developers accept no liability for any potential data loss, corruption, or security breaches resulting from the use of this project.

---