My project is about a web-based Enterprise Password Manager built with Python and Flask, featuring an AES-256-GCM encrypted vault, mandatory TOTP-based Multi-Factor Authentication enforced at the architectural level, a fully separated admin control panel, and a browser extension with autofill functionality.
Unlike existing solutions where MFA is optional, the EPM System makes it non-bypassable by design, verified against the OWASP Top 10 (2025) security standards through automated ZAP scanning, proving that a system can be both highly secure and easy to use.
