Amit Ku Yadav HAVEN
Hi,

Foundation · Home · Security

My Haven

The private foundation behind all public work — built on family, discipline, and a cryptographic security layer that binds every digital action to a verified device identity using SHA-256.

Authentication — End to End

Security System

Every private page in the HI ecosystem is protected by a four-layer auth pipeline. Your device generates a stable fingerprint, SHA-256 hashes it into a bound ID, a signed token carries your session, and requireAuth() guards every page load — with zero passwords stored in clear text.

🔐 Zero Clear-Text SHA-256 · AES-GCM · PBKDF2
01

Fingerprint

Browser Signals Collected Your device is silently profiled by reading:
  • User Agent string
  • Screen resolution & color depth
  • Timezone & language
  • Canvas pixel render
  • WebGL GPU renderer
  • Platform (OS type)
localStorage → ak_device_id
02

SHA-256 Hash

One-Way Transformation All collected signals are concatenated and passed through the Web Crypto API:
  • crypto.subtle.digest("SHA-256",...)
  • 256-bit output → 64 hex chars
  • Avalanche effect: 1 bit change → 50% output flip
  • Irreversible — cannot be reversed to source data
9f3a2c8b…d41e7f12
03

Auth Token

Session Credential Issued After login, server returns a signed JSON token stored in:
  • sessionStorage — tab-only (default)
  • localStorage — persistent (remember me)
Token carries: username, expiry timestamp, role.
ak_auth_token
04

Page Guard

requireAuth() on Every Page Every private page runs a guard on load:
  • Read token from sessionStorage/localStorage
  • Parse JSON → check Date.now() < exp
  • Valid → show page, display username
  • Expired/missing → redirect to login
→ /pages/login.html?next=…

Device Identity Fingerprint

How It Works

A device fingerprint is a stable, unique identifier derived entirely from your browser's environment — no hardware chip, no server call, no cookie. Below are the signals collected on this device right now:

User Agent
Screen Resolution
Color Depth
Timezone
Language
Platform

SHA-256 Transformation

Cryptographic Pipeline
Raw Input (signals joined) UA + Screen + Depth + TZ + Lang + Platform
Function SHA-256
Device ID (64 hex chars) computing…
⚠️ Device-locked by design. If you clear browser data, switch browser, or use a different device, a new fingerprint is generated. This is why HDI codes are one-time — they bind identity to a specific device fingerprint at creation time. Vault backups exist for this reason: to safely restore on a new device.

Auth Token Anatomy

ak_auth_token

The token stored in sessionStorage (or localStorage when "remember me" is active) is a JSON object with these fields:

{
  "username": "amitky",          // display name across all pages
  "exp":      1747234567890,    // Unix ms — checked on every page load
  "role":     "owner",           // access level (owner / member / guest)
  "issued":   1747148167890    // creation timestamp (audit trail)
}

Session Guard Flow

requireAuth()
Page Load Read Token Parse JSON Check exp ✓ Valid → Show Page | ✗ Expired → Login

What Home Means to Me

Foundation

Home is where standard is set. Before public work, before business, before digital presence — there is home. The relationships here are the ones that remain honest when nothing else has to be. The structure here is the one that holds when external pressure builds.

I have learned more about accountability, patience, communication, and long-term thinking from home than from any formal system. That is not sentiment — it is the foundation of how I work. The discipline required to maintain a secure digital system mirrors the discipline required to maintain a dependable home.

Core Values

Non-Negotiable
⚙️

Discipline

Structure is not restriction — it is the foundation of all reliable work and trust.

🤝

Respect

Given to people, to time, and to the work itself — not just to titles or rank.

🛡️

Accountability

If something has my name on it, I am responsible for it — no exceptions.

🌱

Service

Useful work for real people is more important than visible work for approval.

Patience

Long-term, verifiable improvement is more trustworthy than short-term attention.

Daily Structure

Routine System
06:00 – 09:00 Morning

Planning, health, physical discipline, and setting the day's priorities with clarity.

09:00 – 17:00 Daytime

Community engagement, project work, communication, and external coordination.

17:00 – 21:00 Evening

Review, reading, learning — what worked, what didn't, what needs adjustment.

21:00 – 06:00 Night

Rest with intention — protecting sleep as a non-negotiable system requirement.

Digital Home Infrastructure

Security Layer

In 2026, home is also a digital environment. The same values that govern the physical home — discipline, privacy, accountability — govern the digital one.

📡

Connectivity

Reliable access for work, learning, research, and family coordination — treated as essential infrastructure.

🗂️

Information System

Organized personal records, project files, and communication channels — each in its own structured layer.

🔒

Privacy & Security

SHA-256 hashing, AES-GCM vault encryption, device-bound identity, and privacy-first data handling habits.

Location & Environment

Operating Base

Bhagalpur, Bihar, India — the city that is both my origin and my operating base. Working from here is a deliberate choice. The people I serve are here. The community I am part of is here. The context I understand most clearly is here.

Strong local roots are not a limitation — they are a competitive advantage for anyone building long-term trust. Digital tools extend reach; local depth provides the understanding that makes that reach meaningful.

City Bhagalpur, Bihar
Country India
Timezone IST · UTC+5:30
Work Mode Local-first, Digital-enabled

Explore the Full System

The Haven is the security foundation. From here, every private page — Wallet, Vault, Dashboard, Merchant — operates behind the same auth pipeline explained above.

Connected Pages