1,250+
Cybersecurity, SaaS and Credential Management
LockYantra
Passwordless Credential and Secret Management Platform
LockYantra is a passwordless credential and secret management platform for individuals, teams and organisations. It allows users to store passwords, API keys, SSH keys, recovery codes, private notes and confidential documents in one place. Users can sign in through a secure magic link instead of using a traditional account password. The platform allows sensitive information to be shared with team members or clients. Access can be temporary or permanent and can be removed whenever required. LockYantra provides a more secure and organised way to handle important credentials and confidential information.
USAMarket
2 MonthsTimeline
3 DevelopersProject Team
Cybersecurity, SaaS and Credential ManagementIndustry
Executive Summary
LockYantra
- Client
- Andrew King (AK)
- Market
- USA
- Industry
- Cybersecurity, SaaS and Credential Management
- Timeline
- 2 Months
- Team
- Project Team - 3 Developers
- Services
- RAG Development Services, AI SaaS Development, Custom Software Development, AI Workflow Automation
- Technology
- Next.js, TypeScript, Tailwind CSS, Node.js
- Primary Outcome
- 1,250+ Monthly Active Users
Verified project metrics
Project Outcomes
LockYantra gave the client one secure platform for managing personal and team credentials. It reduced dependence on scattered tools and made sharing, permissions and access removal easier to control. The platform also gave the client a stronger base for serving individuals, teams and businesses while adding new security features and services in the future.
Project Overview
LockYantra is a passwordless credential and secret management platform for individuals, teams and organisations. It allows users to store passwords, API keys, SSH keys, recovery codes, private notes and confidential documents in one place. Users can sign in through a secure magic link instead of using a traditional account password. The platform allows sensitive information to be shared with team members or clients. Access can be temporary or permanent and can be removed whenever required. LockYantra provides a more secure and organised way to handle important credentials and confidential information.
What We Built
We built a secure platform for managing and sharing credentials and confidential information. The work covered the frontend and backend systems, REST APIs and MongoDB database. Key components included encrypted storage, permission controls, activity tracking, personal and shared vaults, Web3 wallet connections, smart contract integration, security notifications, global search and responsive design.
Client Background
Andrew King works in the cybersecurity and credential management industry. He identified that passwords, access keys and confidential information were often managed across different tools, making secure access and sharing difficult. He needed a single platform that could support passwordless login, temporary and permanent sharing, permission controls, instant access removal and Web3 identity features.
Project Scope
Our work included:
- Requirement analysis and workflow planning
- UI/UX design
- Frontend, backend and API development
- MongoDB and Mongoose setup
- Passwordless login and session management
- Secure vaults for credentials and notes
- Secret sharing and access control
- Team workspace features
- Web3 and smart contract integration
- Activity logs and security notifications
- Search, filters and dashboard features
- Functional and security testing
- Performance improvements
Target Audience
LockYantra is designed for:
- Individuals
- Developers and DevOps teams
- IT and security teams
- Startups and SaaS companies
- Digital agencies
- Businesses handling client access
- Organisations managing sensitive data
- Web3 users and companies
Objectives
The main objectives were to:
- 01Replace traditional password-based login
- 02Protect sensitive credentials and reduce the risk of leaks
- 03Simplify secure sharing across teams
- 04Give users control over permissions, access duration and revocation
- 05Make security activity easier to track
- 06Support personal, team and Web3 use cases
- 07Build a scalable platform for future growth
Business Challenge
- 01Passwords, API keys, SSH keys, recovery codes and private documents were often stored across browsers, spreadsheets, emails and personal devices.
- 02This made sensitive information difficult to organise and increased the risk of accidental sharing or unauthorised access.
- 03Sharing credentials through email or messaging platforms also gave owners limited control after the information was shared.
- 04Teams needed to control who could view, edit or reshare each item. They also needed temporary access and quick access removal.
- 05Traditional password-based login created another password that users had to remember and protect.
- 06The main challenge was to combine secure login, safe storage, controlled sharing, team access and activity tracking in one platform.
Our Solution
We built LockYantra with a secure digital vault where users could store passwords, API keys, SSH keys, recovery codes and private documents in one place. Magic-link login removed the need for a traditional account password. Users could share selected information with team members or clients and control who could view, edit or reshare it. Access could be temporary or permanent and revoked whenever required. Team vaults and workspace roles made it easier to manage shared credentials. Activity logs recorded logins, access, sharing and permission changes. Real-time alerts also informed users about important security activity. Web3 wallet and smart contract support were added for blockchain-based identity features.
Before → After
Before
Credentials could be stored across different tools.
After
Passwords, keys and documents can be stored inside an encrypted vault.
Before
Users depended on traditional account passwords.
After
Magic links provide passwordless account access.
Before
Sensitive information could be shared through email or chat.
After
Secrets can be shared through controlled links and permissions.
Before
Shared access could remain active after it was no longer needed.
After
Expiry dates, one-time access and instant revocation are available.
Before
Different access levels were difficult to manage.
After
View, edit and share permissions can be controlled separately.
Before
Credential activity was difficult to track.
After
Audit logs record access, sharing and permission changes.
Before
Personal and team records could become mixed.
After
Personal vaults and team workspaces keep information organised.
Before
Important security actions could be missed.
After
Real-time notifications show login and sharing activity.
Delivery ownership
THE TISA's Role
Product Strategy
Discovery
UX/UI Design
Backend Engineering
Frontend Engineering
Integrations
QA
Key Features
LockYantra includes the following main features:
02Passwordless Authentication
01
Passwordless Authentication
- Magic-link login with email verification
- Secure session and device management
Development Process
We began by analysing the main requirements for secure storage, passwordless login, sharing, permissions, team access, activity tracking and Web3 support. Based on these needs, we planned the complete flow from login and vault access to sharing, revocation and security monitoring.
Technical Challenges
Technology Stack
Next.js
TypeScript
Tailwind CSS
Node.js
Express.js
REST APIs
MongoDB
Mongoose
Magic-link authentication
JWT
email verification
Socket.IO
WalletConnect
MetaMask
Ethers.js
smart contracts
Encrypted MongoDB storage
cloud object storage
Docker
Nginx
GitHub Actions
Design Decisions
The interface was designed to keep security controls clear and easy to use. Important decisions included:
- Simple magic-link login
- Separate personal and team vaults
- Hidden values with quick-copy actions
- Categories, search and filters
- Separate panels for sharing and permissions
- Role, access and revocation controls
- Expiry and limited-view settings
- Activity, alerts and security summaries
- Clear wallet connection status
- Responsive vault screens
SEO Work
SEO work focused on public pages while keeping private pages hidden from search engines. Main work included:
- Page titles, descriptions and headings
- Clean URLs, keywords and internal links
- Image optimisation and alt text
- Sitemap, robots.txt and canonical tags
- Social sharing tags
- Public-page indexing
- No-index settings for login and vault pages
Performance Optimization
Performance work included:
- Next.js component optimisation
- Lazy loading
- Reduced unnecessary API calls
- MongoDB query optimisation
- Database indexing
- Pagination for larger vault records
- Fast global search
- Optimised Socket.IO events
- Controlled attachment loading
Security
Protecting passwords, keys and private data was a key part of the platform. Security measures included:
- Passwordless login
- Email verification and JWT
- Secure sessions and device control
- AES-256 encrypted storage
- HTTPS and protected APIs
- Role-based permissions
- Instant access revocation
- CSRF and rate-limit protection
- Input validation
- Secure file access
- Activity logs
Architecture Diagram
Results
For Individuals
- 01Users can manage passwords, recovery codes, licences, private notes and confidential documents through a secure vault.
For Web3 Users
- 01Users can connect supported wallets and use blockchain-based identity features.
Visual Identity
Visual Identity
LLockYantra
ArchivoAa
LockYantra
Color
- #5046E301Primary Purple80 70 227
- #0C8CB902Cyan Blue12 140 185
- #02061703Dark Navy2 6 23
- #121B2C04Panel Background18 27 44
- #1F293805Secondary Panel31 41 56
- #FFFFFF06Primary Text255 255 255
- #8790A007Secondary Text135 144 160
- #2D375808Border Gray45 55 88
- #5DDBAE09Success Green93 219 174
- #F5C94010Warning Yellow245 201 64
- #E993A811Alert Pink233 147 168
Type
- 01 · Primary4 weights
Archivo
ABCDEFGHIJKLMNOPQRSTUVWXYZ
abcdefghijklmnopqrstuvwxyz
0123456789- Bold
- Semibold
- Medium
- Regular
Client Testimonial
We chose Team TISA to build LockYantra because we needed a platform that could manage sensitive credentials more securely. The team understood our requirements, listened to our feedback and made changes whenever needed. LockYantra has made sharing credentials and managing access much simpler for us. We are satisfied with the result and thankful to the team for their work.
Andrew King (AK)
Future Scalability
In the future, LockYantra can include:
- 01
Passkey and biometric login
- 02
Single sign-on for businesses
- 03
Automated credential rotation
- 04
Approval workflows and emergency access
- 05
Advanced audit reports
- 06
Browser extensions and mobile apps
- 07
Cloud and developer integrations
- 08
Support for more blockchain networks
Lessons Learned
The LockYantra project helped us understand that:
- 01
Passwordless login should stay simple and secure
- 02
Access rules should cover permissions, expiry and revocation
- 03
Logs and alerts must not reveal sensitive information
- 04
Personal and team vaults need clear ownership
- 05
Web3 and mobile features should be easy to use
- 06
Future needs should be planned early
Conclusion
LockYantra brings passwordless access, secure credential storage and controlled sharing into one organised platform. It helps individuals and teams handle sensitive information without making everyday use complicated. The project gave the client a product that supports both personal and professional credential management needs.
Building Something Similar?
Talk with THE TISA about the architecture, timeline, team, and technology required for your project.