How I built a zero-knowledge secret sharing tool
The article discusses the creation of SecretVoid, a zero-knowledge secret sharing tool designed to securely share sensitive information. It employs dual-layer encryption to ensure that neither the server nor the creator can access the shared secrets. The tool also includes optional password protection for added security.
- ▪SecretVoid uses client-side encryption to ensure that secrets are encrypted before they leave the user's device.
- ▪The tool employs a dual-layer encryption system, making it impossible for a database breach or URL leak to compromise the secrets.
- ▪An open-source npm package for the client-side module allows for public auditing of the encryption code.
Opening excerpt (first ~120 words) tap to expand
try { if(localStorage) { let currentUser = localStorage.getItem('current_user'); if (currentUser) { currentUser = JSON.parse(currentUser); if (currentUser.id === 3950666) { document.getElementById('article-show-container').classList.add('current-user-is-article-author'); } } } } catch (e) { console.error(e); } Mark Posted on May 25 How I built a zero-knowledge secret sharing tool #showdev #webdev #security #javascript I work with developers. That means at some point, someone needs to share a database password or API key quickly, and Slack is just… there. It's convenient. But that credential is now sitting in Slack's servers, searchable, forever.
…
Excerpt limited to ~120 words for fair-use compliance. The full article is at DEV.to (Top).