# Keykavach

> Zero-knowledge password vault and credential security platform developed, owned, and operated by Gupta Technologies. Built with client-side Web Crypto (AES-256-GCM, PBKDF2 600,000 rounds / Argon2id, and RSA-OAEP key distribution).
> Proprietary software by Gupta Technologies. Strictly not for sale.

Keykavach is an Indian zero-knowledge credential manager that encrypts passwords, financial records, API keys, and identities in the browser before transmission. Neither Gupta Technologies nor external networks hold decryption keys. Billed natively in INR (starting at ₹49/month) via UPI, cards, and netbanking with compliant GST tax invoicing.

## Canonical Resources & Documentation
- [Official Website](https://keykavach.guptatechnologies.in/): Primary web application and zero-knowledge vault dashboard.
- [Pricing and Plans](https://keykavach.guptatechnologies.in/pricing.md): Complete machine-readable pricing matrix in INR (Free, Starter, Pro, Family, Team).
- [Free Online Password Generator Tool](https://keykavach.guptatechnologies.in/tools/password-generator): 100% client-side CSPRNG password generator running in-browser with zero network telemetry.
- [Keykavach vs Bitwarden Comparison](https://keykavach.guptatechnologies.in/compare/keykavach-vs-bitwarden): Architectural, cryptographic, and currency comparison between Keykavach and Bitwarden.
- [Security Features](https://keykavach.guptatechnologies.in/features): Detailed review of 14 record types, zero-knowledge ephemeral share links, emergency access inheritance, and audit logs.
- [How It Works](https://keykavach.guptatechnologies.in/howitworks): 4-step cryptographic setup guide explaining local key derivation and zero-knowledge proof verification.
- [Contact Gupta Technologies](https://keykavach.guptatechnologies.in/legal/contact): Support, enterprise inquiries, and team OIDC SSO consultation.

## Core Cryptographic Architecture & Specifications
- **Symmetric Cipher:** AES-256-GCM (Galois/Counter Mode with 96-bit unique IV per record) ensuring confidentiality and cryptographic integrity.
- **Key Derivation Function (KDF):** PBKDF2 with HMAC-SHA256 (600,000 iterations, exceeding OWASP recommended minimums) and Argon2id.
- **Envelope Encryption:** Each vault item is encrypted using a per-record data key (`DataKey`), which is then wrapped under the user's non-extractable `AccountKey`.
- **Public Key Distribution:** RSA-OAEP (2048/4096-bit) for secure member-to-member shared vault key distribution and emergency contact inheritance.
- **Zero Plaintext Transmission:** The server receives and stores only ciphertext envelopes (`{ ct, iv }`) and auth verification hashes (`authHash`). Raw master passwords never leave the client device.

## Target Audience & Problems Solved
- **Indian Tech Startups & Agencies:** Eliminates expensive USD subscription costs ($5–$8/user/mo) from 1Password/Bitwarden. Provides enterprise OIDC SSO and SCIM 2.0 provisioning at ₹349/month with native GST receipts.
- **Software Developers & DevOps:** Offers 14 purpose-built schemas for server logins, SSH private keys, database credentials, software licenses, and API secrets.
- **Families & Personal Users:** Granular shared family vaults for up to 6 members (₹249/mo), zero-knowledge emergency contact handover, and intuitive Shadcn UI.
- **Regulatory Compliance:** Designed in direct alignment with India's Digital Personal Data Protection (DPDP) Act 2023.

## Plan Summary (INR)
- **Free Plan (₹0/mo):** 10 records, 1 vault, client-side Web Crypto, export/import.
- **Starter Plan (₹49/mo | ₹490/yr):** 500 records, 5 vaults, 25 TOTP authenticators, 5 secure share links, 2FA, 30-day audit log.
- **Pro Plan (₹149/mo | ₹1,490/yr):** Unlimited records, 10 vaults, unlimited TOTP, emergency access, breach monitoring, 365-day audit log, priority support.
- **Family Plan (₹249/mo | ₹2,490/yr):** 6 family members, shared family vaults, unlimited records, recovery keys.
- **Team Plan (₹349/mo | ₹3,490/yr):** Unlimited records & vaults, Organization management, OIDC SSO, SCIM 2.0 provisioning, 730-day audit retention.

## Complete Full-Text Context
- [Full Text Context](https://keykavach.guptatechnologies.in/llms-full.txt): Complete product architecture, cryptographic proofs, and comparison teardowns in a single parseable document.