Aar318's Session Vault

Save and switch multiple named login sessions per site from a private toolbar vault.

**Aar318's Session Vault** Save multiple named login sessions for a website and load them from one compact toolbar vault. Session Vault is designed for people who regularly move among personal, work, family, test, or media-service accounts without maintaining a separate browser profile for every account. **Getting Started** 1. Pin Session Vault to the browser toolbar. 2. Open a supported website and sign in to an account. 3. Select Session Vault, choose **Save current**, and name the profile. 4. Use **Re-auth** to clear the current session locally, sign in to another account, and save it as another profile. Avoid the site's own Sign out command because it may revoke the saved token server-side. 5. Select **Load** on a saved profile. The current site session is replaced and the tab reloads. **Key Features** - **Multiple Profiles Per Site:** Save, name, annotate, color-label, update, rename, export, and delete multiple sessions for each website origin. - **Complete Session Capture:** Capture cookies, including HttpOnly cookies, plus selected localStorage and sessionStorage data. - **Fast Account Switching:** Replace the active site's cookies and selected web storage, then reload to apply the chosen profile. - **Safe Re-authentication:** Clear the site's local session without invoking its normal sign-out flow, then reload and sign in again when adding another account. - **Manual-Only Profiles:** Every completed capture creates exactly one profile. Loading and re-authentication never create automatic profiles or backups. - **Global Session Manager:** Use a grouped, collapsible All Sites overview with search and favorites-first sorting to manage sessions from every saved website. - **Clean Transfer Workflows:** Export and import remain available through downloads and file selection without creating duplicate page overlays. Imports provide clear completion feedback, and an already-entered passphrase can immediately start an encrypted import. - **Flexible Encrypted Backups:** Export one profile, the current site, the active profile, or the complete vault. Exports default to All Sites, use unique timestamps, and offer AES-GCM protection with a four-character passphrase or PIN minimum. - **Password Tools:** Generate ambiguity-free random characters or memorable real-word combinations, then preview, refresh, reveal, copy, and apply the result with clear password controls. - **Controlled Import:** Merge matching profile IDs or import copies with origin, cookie, schema, and size validation plus visible success or failure feedback. - **Optional Master Password:** Encrypt saved profile records at rest, unlock them for the browser session, lock them on demand, and optionally reuse the unlocked password for protected exports and imports. - **Safer Changes:** Load confirmations are enabled by default and can be replaced with optional One-click Load. Separate confirmations protect overwrites and other destructive actions. Imported and restored profiles remain locked to their exact website origin. - **Complete Settings Tools:** Export, import, reset, or clear settings separately from saved profiles. - **Personalized Interface:** Choose dark, light, or system appearance plus Emerald, Blue, Purple, Amber, or Rose accents. - **Accessible Controls and Shortcuts:** Use the toolbar action, Alt+Shift+V, or right-click commands for opening, saving, re-authentication, Ko-fi, and Donate. Responsive, keyboard-accessible controls include explanatory tooltips, a fully visible title with the active website shown compactly on its right, and consistent project-icon branding throughout Profiles, Settings, and About. **New Features (v1.0.0.0)** - Save and load multiple manually captured, named sessions per website with local re-authentication and optional safety confirmations. - Manage the active site or every saved site from a grouped overview with search, favorites, notes, color labels, and individual profile tools. - Create uniquely timestamped encrypted backups with flexible export scopes, reveal/copy controls, and ambiguity-free or memorable password generation. - Keep export and import available while switching applications; full validation and decryption wait for **Import** unless a usable passphrase was already supplied, with clear completion feedback afterward. - Keep transfers in one persistent vault instance through file pickers, automatically close an older injected vault panel to prevent duplicates, optionally load saved sessions with one click, and immediately try an encrypted import when its passphrase was entered before file selection. - Protect locally stored profile records with an optional master password and reuse the unlocked password for encrypted transfers. - Personalize the responsive interface with light, dark, or system appearance, five accent packs, keyboard and right-click shortcuts, clear project-icon branding, and support links. **Permissions** - **Cookies:** Reads, creates, and removes cookies only to capture, restore, or clear sessions at your request. - **Website Access:** Allows session work on the website open in the active tab and supports cookies belonging to that site. - **Scripting:** Reads and restores localStorage and sessionStorage in the active tab after the user opens or invokes the extension. - **Storage:** Keeps settings and saved session profiles inside the local browser profile. - **Context Menus:** Adds user-invoked toolbar-menu shortcuts and support links. **Privacy and Security** Session Vault has no analytics, advertising, telemetry, remote code, or automatic network service. Vault data remains in the local browser profile unless you explicitly export it. Ko-fi and Donate open only when selected. Saved sessions are credentials: anyone with access to them may gain access to the associated accounts. Optional master-password protection encrypts saved profile records at rest; index metadata and settings remain visible. Without it, extension storage is not passphrase-encrypted at rest. Profile exports offer AES-GCM protection and enable it by default; treat every unencrypted export like a password. - Privacy policy: https://gist.github.com/aar318/9d4fc167a12546f162bcef3b91322aad **Limitations** Session Vault captures cookies, localStorage, and sessionStorage. It does not capture IndexedDB, Cache Storage, service-worker state, passkeys, device-bound tokens, HTTP authentication, or server-side session state. Some services may invalidate restored sessions or require re-authentication, especially after password, security, device, or location changes. Selecting Sign out on a website can revoke the saved token on its server, which local restoration cannot undo. Profiles are isolated by exact website origin, so related subdomains may need separate profiles.