CD Vault

Zero-knowledge Biometric Password & 2FA Manager

CD Vault by Medhavo is a zero-knowledge, offline-first password and 2FA manager designed for absolute security. Instead of trusting your master password to a cloud server or a browser cache, CD Vault isolates your decryption keys entirely on your mobile device behind biometric authentication. How it Works (The Biometric Bridge): When you need to log in, the CD Vault extension generates an ephemeral ECDH P-256 keypair and displays a secure QR code. Scanning this code with the Medhavo Android app triggers your device's fingerprint or face scanner. Once verified, the app derives an AES-256-GCM shared secret and pushes your encrypted vault credentials directly to your active browser session via a blind WebSocket relay. Core Features: • Zero-Knowledge Architecture: Your master key never touches our servers and is never typed on your desktop keyboard. • Seamless Autofill: Automatically detects login fields and injects a discrete CD Vault icon to one-click fill your credentials. • Ephemeral Cryptography: Keys are destroyed immediately after the handoff. Past sessions cannot be decrypted. • Auto-Lock Timer: The vault automatically purges from browser memory after 15 minutes of inactivity. Built for security-conscious professionals, CD Vault ensures your digital identity remains strictly in your hands.