PassVaultify

PassVaultify is a password manager that keeps your vault sealed in your own browser. It fills a login only on the site it was saved for, and locks itself when you walk away. FILLS WHERE IT BELONGS • Logins show up only on their own site, or its subdomains. • A look-alike address gets nothing. A page that moved from https to http gets nothing. • Shared hosting domains (github.io, vercel.app and friends) need an exact match, so one site can't fill another's login. • Fill from the popup, or press Ctrl+Shift+L (Cmd+Shift+L on a Mac). ZERO KNOWLEDGE • Your vault is encrypted on your device with AES-256-GCM, using a key derived from your master password (PBKDF2-SHA256, 600,000 iterations). • Your master password is never stored or sent anywhere. • No accounts, no servers, no analytics, no ads. PassVaultify makes no network requests with your data. LOCKS ITSELF • After 1, 5, 15 or 60 idle minutes, or only when Chrome closes. You choose. • Also locks the moment your computer locks. • While unlocked, the key lives in memory, never on disk. ASKS FOR ALMOST NOTHING • No permission warnings at install. PassVaultify can only touch a tab when you click it. • "Offer to save new logins" is off by default. Turn it on and Chrome asks you first; turn it off and the access goes with it. ALSO • Password generator: random characters or a passphrase of real words, colour-coded so a 0 never passes for an O. • Works with the PassVaultify web vault: bring your vault across with an encrypted backup, and send new logins back the same way. • Light and dark themes, four signal colours. PassVaultify is open source: github.com/furmak331/PassVault