Encrypted household workflows and family finance tools.
Encrypted household application
Platforms: Web / PWA / Next.js / PostgreSQL
The problem
Family finances need to be available across devices, but a convenient login should not give the storage server readable access to the household’s sensitive records.
The goal
Keep family financial records usable across trusted devices with encryption in the browser.
Engineering contribution
Browser-side record encryption, passkey authentication, trusted-device approval, and vault-unlock lifecycle.
Account & device trust
The approval route checks the authenticated account, trusted approver, challenge, and device action proof.
Browser encryption
Record encryption uses versioned envelopes, fresh IVs, and authenticated context.
Vault access
The vault provider manages unlock and device-bootstrap state around authenticated requests.