ShieldPass

ShieldPass allows users to add and retrieve credentials from the Gnosis Chain. To do so, the user interacts with a Web extension that enables in particular to cypher the data. The Web extension is designed to be easy to use and compatible with the wallet. ShieldPass has many advantages and can implement advanced an anti-phishing mechanism. Besides, we have a website presenting the project, the team and the milestones. For the moment, a user can add, retrieve and update credentials but there are many different features that we’d like to implement after this Hackathon such as multi-party encryption, credential lending…

ShieldPass enables the user to retrieve a symmetric cryptographic key thanks to a message signed with Metamask. It enables users to use ShieldPass without having a master password but only thanks to the Metamask access. To do so, we use the Webcrypto API of the browser. We consider as a credential, the tuple (website, login, password). To add a credential on the password manager, we use the Wagmi client to call the addCredential entrypoint of our Smart contract deployed on Gnosis Chain. To retrieve credentials, we leverage the Graph in order to retrieve the encrypted data in a user-friendly fashion. To decrypt the credentials, we use the same key as the one used for the encryption. To update a set of credentials, we leverage the Graph to save some gas fees. We decided to use Gnosis Chain because it is highly decentralized and the transaction fees are very low, it means that to add or update a credential, the fees to be paid are very low. It allows users to store many passwords without caring too much about fees. Furthermore, Gnosis Chain is the L1 with one of the cheapest transaction fees which makes it the perfect equilibrium between security and efficiency.