Scroll ▼

Résumé ↓ENES
← Back to work

06/06 · Browser extension

Password Vault

Local password manager for Chrome and Edge. Envelope encryption with AES-256-GCM and scrypt derivation at twice the OWASP minimum; keys live only in the service worker.

Chrome & Edge
password-vault.internal

216

tests

2×

OWASP scrypt minimum

06
Role
AuthorCryptography
Stack
Manifest V3AES-256-GCMscryptTypeScript
Launch
2026
Status
Chrome & Edge
  • 216

    tests

  • 2×

    OWASP scrypt minimum

About the project

Envelope encryption: a master key derived with scrypt wraps per-entry data keys, so rotating the master never re-encrypts the vault.

Keys never touch the content script or storage in clear. The popup asks the service worker to decrypt on demand.