Deploying Mybucks.online

Introduction

Mybucks.online is a privacy-first, encrypted personal finance manager that stores all your financial data with end-to-end encryption. Unlike traditional finance applications where the server can read your data, Mybucks.online encrypts everything client-side before it ever reaches the server, ensuring that only you can access your financial information.

Built with privacy as the core principle, Mybucks.online uses your passphrase to derive encryption keys locally in your browser. The server never sees your raw financial data, transactions, or account details. Even if the server were compromised, your data would remain encrypted and unreadable.

Key highlights of Mybucks.online:

End-to-End Encryption: All data encrypted client-side before transmission
Zero-Knowledge Architecture: Server cannot read your financial data
Passphrase-Based Security: Strong encryption derived from your passphrase
No Account Required: Use immediately without registration
Transaction Tracking: Log income, expenses, and transfers
Category Management: Organize spending by custom categories
Multiple Accounts: Track bank accounts, credit cards, and cash
Data Export: Export your encrypted data for backup
Open Source: Fully auditable codebase

This guide walks through deploying Mybucks.online on Klutch.sh using Docker.

Why Deploy Mybucks.online on Klutch.sh

Deploying Mybucks.online on Klutch.sh provides maximum privacy for your finances:

True Privacy: Your financial data is encrypted before leaving your browser. Even with server access, your data remains unreadable.

Self-Hosted Control: Running your own instance means no trust required in third-party services.

Always Available: Access your encrypted finances from anywhere with persistent storage.

Simplified Deployment: Klutch.sh handles infrastructure while you maintain privacy.

HTTPS by Default: Encrypted transport layer protects against interception.

Prerequisites

Before deploying Mybucks.online on Klutch.sh, ensure you have:

A Klutch.sh account
A GitHub account with a repository for your configuration
Basic familiarity with Docker concepts
A strong passphrase for encrypting your data

Understanding the Encryption Model

Mybucks.online uses a zero-knowledge encryption architecture:

Passphrase Derivation: Your passphrase is processed through a key derivation function (like PBKDF2 or Argon2) to create encryption keys.

Client-Side Encryption: All financial data is encrypted in your browser before being sent to the server.

Server Storage: The server only stores encrypted blobs that it cannot decrypt.

Decryption on Access: When you access your data, encrypted blobs are downloaded and decrypted locally in your browser.

This means:

Losing your passphrase means losing access to your data
The server operator cannot recover your data
No password reset functionality exists
Backup your passphrase securely

Preparing Your Repository

Create a GitHub repository for your deployment.

Repository Structure

mybucks-deploy/
├── Dockerfile
└── .dockerignore

Creating the Dockerfile

FROM mybucks/mybucks:latest

# Expose web interface
EXPOSE 3000

# Data volume for encrypted storage
VOLUME ["/app/data"]

Creating the .dockerignore File

.git
.github
*.md
LICENSE
.gitignore
.DS_Store

Deploying Mybucks.online on Klutch.sh

Push Your Repository to GitHub

Initialize and push your repository with the Dockerfile to GitHub.

Create a New Project on Klutch.sh

Navigate to the Klutch.sh dashboard and create a project named “mybucks” or “finance-encrypted”.

Create a New App

Create a new app and connect your GitHub repository.

Configure HTTP Traffic

Mybucks.online serves its web interface over HTTP:

Select HTTP as the traffic type
Set the internal port to 3000

Attach Persistent Volumes

Configure storage for encrypted data:

Mount Path	Recommended Size	Purpose
`/app/data`	1 GB	Encrypted financial data storage

Deploy Your Application

Click Deploy to build and start your Mybucks.online instance.

Access Your Finance Manager

Visit https://your-app-name.klutch.sh to access Mybucks.online.

Getting Started

Creating Your Vault

On first access:

Choose a strong passphrase (15+ characters recommended)
This passphrase encrypts all your data
There is no password recovery - store it securely
Enter the passphrase to create your encrypted vault

Important Security Notes

Never share your passphrase - it’s the only key to your data
Store passphrase offline - use a password manager or secure physical storage
Same passphrase = same vault - access your data from any browser with your passphrase
Different passphrase = new vault - entering a different passphrase creates a separate encrypted space

Adding Accounts

Set up your financial accounts:

Navigate to Accounts
Add accounts for each bank account, credit card, or cash source
Set initial balances
Accounts are encrypted before storage

Recording Transactions

Track your financial activity:

Select an account
Add transactions (income or expense)
Categorize each transaction
Add optional notes
All data encrypted before saving

Features

Transaction Categories

Organize spending:

Create custom categories
Assign categories to transactions
View spending by category
Track category trends

Account Management

Multiple account support:

Bank accounts
Credit cards
Cash tracking
Investment accounts
Custom account types

Reports and Analytics

Understand your finances:

Spending summaries
Category breakdowns
Balance trends
Income vs. expense

Data Export

Backup your encrypted data:

Go to Settings > Export
Download encrypted backup file
Store backup securely
Restore by importing with your passphrase

Security Best Practices

Passphrase Security

Create a strong passphrase:

Use 15+ characters minimum
Include words, numbers, and symbols
Avoid personal information
Use a unique passphrase not used elsewhere

Backup Strategy

Protect against data loss:

Export encrypted backups regularly
Store backups in multiple secure locations
Verify backups can be restored
Keep passphrase and backups separate

Browser Security

Protect the client environment:

Use a secure, updated browser
Avoid public computers
Clear browser data on shared devices
Consider using a private/incognito window

Advanced Usage

Multiple Vaults

Create separate financial spaces:

Use different passphrases for different vaults
Separate personal and business finances
Create temporary vaults for specific projects

Since encryption is passphrase-based:

Share the passphrase to share access (only if trusted)
Anyone with the passphrase can read all data
No granular permission system
Consider separate vaults for shared finances

Troubleshooting

Cannot Access Data

Verify you’re using the exact same passphrase
Passphrases are case-sensitive
Check for extra spaces
Try your passphrase on a new browser

Data Not Syncing

Encryption/decryption happens in browser
Ensure transactions are saved before closing
Check network connectivity
Verify storage volume is mounted

Performance Issues

Large transaction histories may slow decryption
Archive old data periodically
Clear browser cache if experiencing issues

Comparison with Other Finance Apps

Feature	Mybucks.online	Traditional Finance Apps
Server can read data	No	Yes
Password recovery	No	Yes
Account required	No	Yes
Data privacy	Maximum	Variable
Risk of server breach	Minimal	Significant

Additional Resources

Conclusion

Deploying Mybucks.online on Klutch.sh gives you the most private way to manage personal finances. The zero-knowledge encryption ensures that your financial data remains truly yours, visible only to you, even when hosted on remote infrastructure.

The tradeoff for this privacy is the critical importance of your passphrase - there’s no recovery option if you forget it. However, for privacy-conscious individuals, this is exactly the point: true ownership of your financial data means true responsibility for its access.

Whether you’re tracking daily expenses or managing complex finances, Mybucks.online on Klutch.sh provides uncompromising privacy for your financial information.