Media
5 items
Description
Local encrypted password manager. Unlock by fingerprint or password. No cloud, no accounts. Sync by QR code or encrypted file. NEW IN 0.9.3 - A new look. Day and night modes, the striped V, and raised buttons with recessed panels across the popup, Manage, the bookmarks panel, and the User Guide. Switch modes with the sun and moon button. - New V tags on websites. A white circle with the striped V fills a login, and a charcoal one generates a password. The login picker and the save prompt follow your day or night choice. - Confirmations in Manage, such as deleting a login or clearing the vault, now use Valid Vault's own dialogs. - Logins are now found on sites whose username box has no type, so those sites get a V tag and a save prompt. - Logins and other items you revealed in Manage clear from the page when the vault locks. - A new toolbar icon, the white striped V. NEW IN 0.9.2 - Valid Vault keeps an encrypted backup copy of your vault in its own storage. If the browser clears site data, the vault is restored at the next start. - Uni-Vault writes merged changes back to the linked file right away, so every linked browser ends up with the same vault. - Renaming the key and vault offers to save a key file and a vault file under the new name right away. Valid Vault is a local, encrypted password manager. Your vault is encrypted on your device and never leaves it unless you move it yourself, as ciphertext, to another device you own. No cloud, accounts, or servers. No analytics. There is nothing to sign up for and nothing stored anywhere but your own browser. Works in Chrome, Edge, and Brave on Windows, Linux, and ChromeOS. Fingerprint and device PIN unlock use Windows Hello on Windows; on Linux, unlock with your master password. The Android app runs on the same code, with autofill in other apps, a private browser, and home screen widgets. The project is open source. UNLOCK Fingerprint, device PIN, or local password Unlock with Windows Hello (fingerprint or your device PIN) through WebAuthn, or with a local master password. Computers without Windows Hello work fully with a password. One master key, no stored passwords A random 256-bit master key encrypts your vault. It is wrapped separately under each unlock method you set up, and unwrapping it is the check itself. There is no password hash stored anywhere to attack. Auto-lock The vault locks itself after the idle time you choose, from 10 seconds up to 2 hours. Only real mouse, scroll, click, and keyboard activity keeps it open. Confirm before sensitive changes Editing or removing an unlock method, clearing the vault, and every key or vault export, import, or QR transfer ask for your fingerprint, device PIN, or password first, even while the vault is unlocked. DAY AND NIGHT Ink for day and Platinum for night, switched with the sun and moon button. The popup, Manage, the bookmarks panel, the User Guide, and the pop-ups on websites all follow your choice. AUTOFILL Click-to-fill Login, password, and personal info fields get a small V tag. Click it and pick what to fill. Nothing is filled without your click. Fields inside modern web components and multi-step forms are detected too, and tags clear away when a step slides out of view. Save as you go Sign up or log in on a site and Valid Vault offers to save the login, including through sign-in redirects and multi-step forms. Password generator New password and change password fields get their own V that creates a strong random password and fills both the new and confirm boxes. Choose a password with special characters, or letters and numbers only for sites that reject symbols. Special characters come from the set most sites accept. It follows any rules the site sets, and you choose the length range in Settings, up to 64 characters. Previous password safety net When you change a password, the old one is kept as a labeled backup with one-click restore for 30 days, in case the site never accepted the change. WHAT YOU CAN STORE Website logins, grouped by site, with multiple accounts per site. Misc credentials, such as Wi-Fi passwords and license keys. Personal info (name, phone, address, and ranked emails) used to fill forms. Crypto wallet seed phrases, organized by wallet and account, checked word by word against the standard 2048-word list, entirely offline. Seed words are only on screen while you choose to show them and are never filled into web pages. Encrypted bookmarks, saved from the popup and listed in a searchable side panel. HOW YOUR DATA IS PROTECTED Everything is encrypted with AES-256-GCM using the browser's built-in WebCrypto. Website logins, crypto wallets, and bookmarks are each sealed as a single encrypted blob, so not even a site name or wallet name is readable at rest. An encrypted backup copy kept in the extension's own storage restores the vault if the browser clears site data. Web pages never see your master key. Autofill runs from the extension's background, and a page only ever receives the one value you clicked to fill. ONE VAULT FOR EVERY BROWSER Uni-Vault links each browser on your computer to a single encrypted vault file. Changes reach the file within about a second, and other linked browsers pick them up automatically, with no exporting or importing after the first link. A damaged file, a replaced file, or a file made with a different master key is refused and never overwritten. MOVING BETWEEN YOUR DEVICES Share Vault shows your encrypted vault, bookmarks included, as an animated QR code, as large as your window allows, that another device scans with its camera. Export Vault saves the same encrypted vault as a file you can carry by USB drive or any other transport. Either way, it is useless without your master key, and every transfer asks for your fingerprint, device PIN, or password first. Your master key only leaves a device wrapped under a passphrase and three security questions you choose, and the receiving device must enter all of them before it can use the key. A photographed QR code or a stolen key file is useless on its own. When you import a key, fingerprint or device PIN is offered first to lock it on the new browser. Lost a key file or forgot its passphrase? While any device still unlocks your vault, Change Key Passphrase and a fresh Export Key replace it. There is no server in between, and devices merge changes by timestamp, so edits and deletes carry across. Every import is checked before anything is saved, the same login is never saved twice, and importing the same vault again changes nothing. IMPORT FROM ANOTHER APP Bring your logins over from another password manager's export: a CSV, a Samsung Pass file, Bitwarden JSON, a 1Password .1pux file, or Dashlane's zipped export. Bring your bookmarks straight from this browser or from another browser's bookmarks HTML file. Everything is read on your computer and encrypted into your vault as it comes in. Logins and bookmarks you deleted stay deleted, and links you already have are skipped. Valid Vault can't delete the export file for you, so it reminds you to delete it, since most exports hold your passwords unencrypted. USER GUIDE A full, searchable User Guide opens from the popup menu. It covers setup, every setting, autofill, importing from another app, backups, moving between devices, what can and cannot be recovered, recommended setups, and troubleshooting. PRIVACY Valid Vault collects nothing, transmits nothing, and has no analytics or tracking. It makes no network requests at all. Your vault, your key, and your settings stay on your devices. Extensions for additional browsers are in development.