Password Vault
Password Vault
An encrypted vault that fills your logins with a keyboard shortcut or a click. No account to create, nothing to sync, and not a single network request.
Click into a username box and pick from your saved logins, or press ⌘⇧L. Save a new one with ⌘⇧Y, or just accept the prompt when you sign in.
Fills React and Vue inputs correctly, not just plain HTML forms — including fields inside iframes and web components.
When a page has several sign-in forms, it fills the one your cursor is in rather than the first one it finds.
Unlock with your fingerprint instead of typing your master password. Your master password still works, and remains the only way to recover.
Adjustable length and character sets, with lookalike characters excluded by default so a password is safe to read aloud.
Finds reused and weak passwords across your vault. Runs entirely on your machine — no password is sent anywhere, not even hashed.
Load a password export from Chrome, Firefox, 1Password or Bitwarden. Duplicates merge instead of piling up.
Your vault is a single AES-GCM-256 encrypted blob in your browser's local extension storage. The key is derived from your master password with PBKDF2-SHA256 at 600,000 iterations. Not even the list of sites you have saved is readable without it.
There is no server, no account system, no analytics and no crash reporting. The extension works entirely offline.
Not in plaintext, not hashed, not anywhere. It exists only for as long as it takes to derive the key.
On inactivity, when your computer goes idle, and whenever Chrome quits. Repeated wrong attempts trigger an escalating delay.
A copied password is cleared after 30 seconds — and only if the clipboard still holds it, so anything you copied since is left alone.
Being straight with you: there is no sync and no cloud backup, and while the vault is unlocked, anyone using your computer can see your saved logins. If you forget your master password, nobody — including me — can recover your vault. Keep an encrypted backup.
That is a browser restriction, not a limitation of this extension — no password manager can read Chrome's built-in store. To bring your existing passwords across, export them from Chrome (Settings → Autofill and passwords → Google Password Manager → Settings → Export passwords) and import the file. Delete the export afterwards; it is not encrypted.