Passwords for developers who ship fast

1// Keyforge encryption flow
2import { encrypt, derive } from '@keyforge/core';
3 
4async function encryptVault(data: VaultData) {
5  // Derive key from master password (PBKDF2)
6  const key = await derive(masterPassword, {
7    salt: crypto.randomBytes(32),
8    iterations: 600_000,
9    hash: 'SHA-256'
10  });
11 
12  // Encrypt with AES-256-GCM
13  const encrypted = await encrypt(data, key, {
14    algorithm: 'AES-256-GCM',
15    iv: crypto.randomBytes(12)
16  });
17 
18  return encrypted; // Never leaves device unencrypted
19}