All projects
security
Notes the server cannot read
End-to-end encryption where the server genuinely never sees plaintext.
Why it matters
Most 'encrypted' apps encrypt in transit and call it end-to-end. Building one where the server truly cannot decrypt forces you to confront key management honestly.
What you build
- Client-side encryption before anything is sent
- Key derivation from a passphrase
- A written threat model naming what you do not protect against
- A demonstration that the stored data is opaque
If you want more
- Add multi-device key sync
- Add sharing with another user
Build it
- Show the stored ciphertext and demonstrate the server cannot read it
Material for the whole build
Shows you can apply cryptography correctly and, more importantly, describe its limits.
Get a plan built around projects like this