P@ssword123
P@ssword123 needed to become a usable security product: encrypted vaults, breach monitoring, team collaboration, secure sharing, passkeys, two-factor flows, billing, audit history, and a browser extension.
Goals
- Protect vault data with clear encryption boundaries and per-user key derivation
- Support breach monitoring, password strength analysis, secure sharing, and team access
- Connect the web app, API, billing, background jobs, and Chrome extension into one product
Constraints
- Security-sensitive workflows need audit logging, recovery paths, and careful state handling
- Extension access, web sessions, organization roles, and API auth have to align
- The app needs to move from cPanel-friendly deployment toward a Docker-ready dedicated-host runtime
Strategy
We organized the Laravel app around domain/application actions, PostgreSQL persistence, Redis-backed cache/session/queue support, Sanctum APIs, AES-256-GCM encryption with HKDF key derivation, WebAuthn/TOTP security flows, Paystack billing, and a standalone Chrome MV3 extension.
The Process
Vault
Built encrypted vault, organization, team, sharing, audit, and subscription workflows around security-first domain actions.
Protection
Added breach monitoring, password strength analysis, passkeys, TOTP, trusted devices, recovery flows, and login audit trails.
Deployment
Prepared the app for dedicated Docker hosting with separate web, queue, scheduler, PostgreSQL, and Redis services.
Results
AES-256-GCM vault encryption with HKDF key derivation
Breach monitoring, strength analysis, passkeys, and TOTP
Autofill, OTP handling, and pending-save browser workflows
Gallery
Security homepage
The primary capture introduces the password manager, vault protection, and product positioning.
Feature system
The features capture shows how vault encryption, breach alerts, sharing, and passkeys are presented.
Pricing tiers
The pricing capture turns the product into clear buyer options for individuals, teams, and organizations.
Service positioning
The services capture explains security use cases and product value for South African customers.
Want a Build Like
P@ssword123?
Book a free 30-minute discovery call. We'll talk through what you're trying to ship, where the risk sits, and what it would take to get there.