GitFortify
A password security analysis platform featuring real-time breach detection and zero-knowledge privacy.
Overview
GitFortify is an advanced password security analysis platform designed to simulate real-world attack scenarios while maintaining 100% zero-knowledge privacy. It evaluates password strength using Shannon Entropy and heuristic pattern matching. Additionally, it provides real-time breach detection by querying databases containing over 17 billion records, utilizing a k-Anonymity architecture to ensure that user passwords are never exposed or transmitted in plaintext.
What I Did
Built a highly performant and secure frontend application. Implemented client-side cryptography using the WebCrypto API to hash passwords locally. Designed the integration with the Have I Been Pwned (HIBP) and XposedOrNot APIs using the k-Anonymity protocol, ensuring secure data retrieval. Also developed interactive data visualizations, including geospatial breach maps, to present complex security metrics clearly to the user.
Tech Stack
Technical Decisions
Chose React and Vite to ensure a modern, fast development experience and highly optimized production builds. Selected Tailwind CSS for rapid, scalable UI styling. I opted for 'zxcvbn' over simple regex for password analysis because it provides significantly more realistic strength estimations by recognizing common patterns and dictionaries. Client-side hashing was a critical decision to guarantee that passwords never leave the user's browser, complying with GDPR and top security standards.
Architecture
What I Learned
Gained hands-on experience implementing privacy-first architectures, specifically the k-Anonymity protocol, which allows querying external databases without leaking sensitive user data. Deepened my understanding of client-side cryptography and performance optimization, achieving sub-100ms analysis times and an optimized bundle size.