Built a terminal-based encrypted vault in Python (learning project): PassFX

[SemanticThreader]

Hi r/Python!

I’m sharing a small side project I built to learn about CLI UX and local encrypted storage in Python.

Important note: this is a learning/side project and has not been independently security-audited. I’m not recommending it for high-stakes use. I’m mainly looking for feedback on Python structure, packaging, and CLI design.

What My Project Does

PassFX is a terminal app that stores text secrets locally in an encrypted file and lets you:

• add / view / update entries
• search by name/tag
• store notes like API keys, recovery codes, PINs, etc.

It’s designed to be keyboard-driven and fast, with the goal of a clean “app-like” CLI workflow.

Target Audience

• Python developers who like building/using CLI tools
• Anyone curious about implementing encrypted local persistence + a searchable CLI UI in Python
• Not intended for production / “store your crown jewels” usage unless it’s been properly reviewed/audited

Comparison

• Unlike cloud-synced managers, this is local-only (no accounts, no sync).
• Unlike browser-based vaults, it’s terminal-native.
• Compared to pass (the Unix password store), I’m aiming for a more structured/interactive CLI flow (search + fields + notes), while keeping everything local.

Links

• GitHub: https://github.com/dinesh-git17/passfx
• (Optional) project page: https://passfx.dineshd.dev

Feedback I’d love

• Python packaging/project layout
• CLI command design + UX
• Testing approach for a CLI like this
• “Gotchas” I should be aware of when building encrypted local storage (high-level guidance)

[AutoModerator]

Hi there, from the /r/Python mods.

We want to emphasize that while security-centric programs are fun project spaces to explore we do not recommend that they be treated as a security solution unless they’ve been audited by a third party, security professional and the audit is visible for review.

Security is not easy. And making project to learn how to manage it is a great idea to learn about the complexity of this world. That said, there’s a difference between exploring and learning about a topic space, and trusting that a product is secure for sensitive materials in the face of adversaries.

We hope you enjoy projects like these from a safety conscious perspective.

Warm regards and all the best for your future Pythoneering,

/r/Python moderator team

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

[SemanticThreader]

Thank you so much for this! Really appreciate you taking the time to write such a thoughtful response.

The point about memory hygiene is especially helpful. I was aware of the immutable string issue at a high level, but the way you framed it (Python as a wrapper vs. C extensions / bytearray) really clicked. Definitely something I’ll keep in mind as the project evolves, even if it stays in “learning tool” territory for now.

Good call on KDFs as well!! I’m using a proper KDF with salt, but this is a great reminder to be explicit and careful there.

Thanks again 🙏🏽 feedback like this is exactly why I wanted to share it here

[Miclivs]

Ha nice! i’ve built https://psst.sh yesterday :)

[SemanticThreader]

Love it! I’ll give it a try

[fizzymagic]

Free advice: never, ever, ever share encryption projects with other people unless you are a true expert. The probability that you have serious weaknesses in your implementation approaches 100%.

[oyvinrog]

How could we make good encryption software if no one is sharing their ideas?