Valid Vault Password Manager

NEW IN 0.8.4.1 - Logins saved on one part of a site now fill on its other parts, such as a separate sign-in page. They are listed in their own section with the address each one was saved under. NEW IN 0.8.4 - Import your logins from another password manager or browser. Export your passwords as a CSV file and Valid Vault encrypts each login straight into your vault. Most common exports are recognized, and any other CSV can be matched by column. - When the file has a different password for a login you already have, you see both, masked, with when each was last changed and when yours was last used, and pick the current one. The other is kept as the previous password for 30 days. Stopping an import changes nothing. - Import This Browser's Bookmarks brings in the bookmarks of the browser Valid Vault runs in with one click. Chrome asks for permission when you click, and Valid Vault gives it back as soon as the bookmarks are read. Bookmarks from another browser import from its bookmarks HTML file. - Previous passwords are now kept for 30 days from the day they were replaced, and each login shows when it was last used. - Valid Vault still has no unencrypted export. Importing is one way. NEW IN 0.8.3 - Importing a key file that still carries the default name no longer replaces a key name you set. A key file with its own name still brings it along. - Key import prompts now say plainly that the password you enter unlocks the key on this browser only and is never put in a key file. - Passphrase, security answer, and password boxes in Valid Vault's own dialogs no longer trigger Chrome's offer to save them. They stay masked, and copying out of a masked box is blocked. - Merging and Uni-Vault keep the linked apps the Android app creates, so a vault that passes through the extension still carries them. - A new About page. NEW IN 0.8.1.1 - Key files and key QR codes are checked against the exact format Valid Vault writes before anything else happens. A damaged or tampered key file is refused at once and nothing changes. Every key file Valid Vault has made still imports. NEW IN 0.8.1 - The vault QR is larger and compressed, so it takes about half as many frames, and frames the camera misses are filled in by later ones. The vault QR and key QR are now the same size. Update the Android app too, since its older version can't read the new QR. - The scanner uses a sharper camera feed and reads only the square shown in the scan box. - Importing a key keeps the nickname it was exported with, so your key and vault files stay easy to tell apart. - Importing a different key now asks every question before saving anything, so cancelling at any step changes nothing. Valid Vault is a local, encrypted password manager. Your vault is encrypted on your device and never leaves it unless you move it yourself, as ciphertext, to another device you own. No cloud, accounts, or servers. No analytics. There is nothing to sign up for and nothing stored anywhere but your own browser. Works on Windows, Linux, and ChromeOS. Fingerprint and device PIN unlock use Windows Hello on Windows; on Linux, unlock with your master password. The Chrome extension is stable and in daily use. The Android app runs on the same code and is in active development, with autofill in other apps, a private browser, and home screen widgets. The project is open source. UNLOCK Fingerprint, device PIN, or local password Unlock with Windows Hello (fingerprint or your device PIN) through WebAuthn, or with a local master password. Computers without Windows Hello work fully with a password. One master key, no stored passwords A random 256-bit master key encrypts your vault. It is wrapped separately under each unlock method you set up, and unwrapping it is the check itself. There is no password hash stored anywhere to attack. Auto-lock The vault locks itself after the idle time you choose, from 10 seconds up to 2 hours. Only real mouse, scroll, click, and keyboard activity keeps it open. Confirm before sensitive changes Editing or removing an unlock method, clearing the vault, and every key or vault export, import, or QR transfer ask for your fingerprint, device PIN, or password first, even while the vault is unlocked. AUTOFILL Click-to-fill Login, password, and personal info fields get a small V tag. Click it and pick what to fill. Nothing is filled without your click. Fields inside modern web components and multi-step forms are detected too, and tags clear away when a step slides out of view. Save as you go Sign up or log in on a site and Valid Vault offers to save the login, including through sign-in redirects and multi-step forms. Password generator New password and change password fields get their own V that creates a strong random password and fills both the new and confirm boxes. Choose a password with special characters, or letters and numbers only for sites that reject symbols. Special characters come from the set most sites accept. It follows any rules the site sets, and you choose the length range in Settings, up to 64 characters. Previous password safety net When you change a password, the old one is kept as a labeled backup with one-click restore for 30 days, in case the site never accepted the change. WHAT YOU CAN STORE Website logins, grouped by site, with multiple accounts per site. Misc credentials, such as Wi-Fi passwords and license keys. Personal info (name, phone, address, and ranked emails) used to fill forms. Crypto wallet seed phrases, organized by wallet and account, checked word by word against the standard 2048-word list, entirely offline. Seed words are only on screen while you choose to show them and are never filled into web pages. Encrypted bookmarks, saved from the popup and listed in a searchable side panel. HOW YOUR DATA IS PROTECTED Everything is encrypted with AES-256-GCM using the browser's built-in WebCrypto. Website logins, crypto wallets, and bookmarks are each sealed as a single encrypted blob, so n…