toolcrate
All tools →
🔐 encrypted locally, never synced anywhere

Password Vault

Store logins locally, encrypted with a master password using real AES-256-GCM (native Web Crypto API). Nothing is ever sent to a server - the encrypted vault lives only in this browser's storage.

How it works

Entries are encrypted with AES-256-GCM using a key derived from your master password via PBKDF2 (250,000 iterations, SHA-256) plus a random salt generated fresh on every save; the encrypted blob is the only thing written to your browser's localStorage, under the key password-vault-blob - nothing is ever sent to a server, and there's no cloud sync.

FAQ

What happens if I forget my master password?
There's no recovery - decrypting the vault requires re-deriving the exact same AES key from your master password, so if you forget it, the stored entries are permanently unreadable; there's no reset or backdoor.
Is the vault available on my other devices?
No - it's stored only in this browser's localStorage, tied to this specific browser profile on this device; there's no sync, so a vault created here won't appear on another computer or browser.

Free, unlimited, no account. If this saved you a paid tool, a small thanks is appreciated.

Say thanks — $3