About TotLaUnLoc: Secure & Efficient Account Management

TotLaUnLoc is a powerful and intuitive desktop application designed to streamline your digital security. For individual users, it provides a fast and easy way to view all saved accounts on your device, allowing you to quickly delete unwanted entries or perform bulk deletions. It also securely manages your Time-based One-Time Passwords (TOTP) and checks if your accounts have been compromised in known data breaches.

For security professionals and IT administrators, TotLaUnLoc offers robust features to manage tens or hundreds of devices using our license keys. This enables efficient oversight and control over multiple installations, ensuring consistent security policies across your organization.

It's important to note that the application does not access or decrypt passwords stored by browsers. Instead, TotLaUnLoc empowers you to manage accounts saved across most browsers, offering functionalities such as individually deleting an account with its associated password or deleting all passwords from a browser profile. The application provides a modern, intuitive, and easy-to-use interface for organizing credentials and ensures data confidentiality through local encryption.

Technology Stack

The application is built using a modern technology stack, combining a Svelte-based frontend with a robust backend written in Rust, all integrated into a desktop application using the Tauri framework.

• Frontend: Developed with Svelte, a reactive JavaScript framework that enables the creation of fast and efficient user interfaces. The interface is designed to be intuitive and responsive.
• Backend: Implemented in Rust, a programming language known for its safety, performance, and concurrency. The backend manages business logic, including data encryption, interaction with the SQLite database, and TOTP code generation.
• Tauri: Utilizes Tauri to package the web application (Svelte) into a native desktop application, providing access to operating system-specific functionalities and a reduced resource footprint.
• Encryption: All sensitive data is encrypted locally to ensure maximum confidentiality and security.
• Data Breach Verification: It is important to note that the application does not access or decrypt passwords stored by browsers. The data breach verification functionality is performed by comparing the website name and account/username with a local database of known breaches, thus ensuring the confidentiality of your passwords. No passwords are sent to external servers during this process.
• TOTP: Integration with the totp-rs library allows for the generation and management of time-based one-time authentication codes.