CypherKey

The open-source password manager where your password only works when you type it.

github.com/IrietekCorp/cypherkey

hello@cypherkey.io

The Problem

The average person juggles ~120 passwords, and over 68% reuse passwords across services. Credential abuse continues to appear in ~39% of all breaches. Every existing solution introduces friction: authenticator apps, SMS codes, hardware dongles, and fragmented passkeys that do not sync cleanly across ecosystems.

The Solution

A zero-knowledge vault coupled with an unforgeable, zero-step behavioral second factor derived from the sub-millisecond cadence of typing your passphrase (dwell time, flight time, digraph rhythms).

Zero Extra Steps: No phone to grab, no authenticator app to open, no SMS code to wait for. Just type.
Works with Existing Passwords: Protects the passwords guarding your tools, servers, and services today.
Open Source & Zero Knowledge: MIT client and AGPL-3.0 server. Self-host with one command: docker compose up.

Why It's Different

The Rhythm Light: Visible indicator pulses on typing; capture code throws if light is hidden.
Data Minimization: Raw keystrokes and vectors are never saved; only irreversible statistical profiles.
Degradation Ladder: Pass, grey-band retry, passkey/TOTP step-up, and Pause mode prevent lockout.

Why Now

Behavioral biometrics is proven in enterprise banking/DMVs, but sold closed and expensive.
Passkeys cover ~48 of the top 100 websites; passwords protect the other 52 and legacy infra.
CypherKey bridges the gap: stores passkeys and defends passwords.

Business & Traction Roadmap

Pricing: Free (2 devices, unlimited items, self-host) • Pro ($30/yr, unlimited sync, breach alerts) • Teams ($4/user/mo) • Progressive Enrollment SDK for services.

Milestones: M0 Browser Demo (Sept 2026) • M1 ZK Core & Server (Oct) • M2 Chrome Extension Beta (Dec) • M3 Public Launch (Jan 2027: 5K stars target).

Founder & The Ask

Founder: Built the first typing dynamics authentication system at CBSSports.com in 2010 ("KeyStroke Captcha"). Building solo with modern AI tooling to bring this long-proven defense to everyone.
The Ask: Introductions to cybersecurity & developer-tool angel investors/founders; advice from Hacker News launch veterans; candid feedback on the browser demo.