Aperture Vault · Exact Autofill

A local encrypted vault that matches credentials by scheme, host, and port.

Aperture Vault is a local-first password manager for Chrome and Microsoft Edge. It keeps credentials encrypted in the current browser profile and matches sign-in pages by exact scheme, hostname, and effective port, so accounts for different protocols or ports are not silently mixed together. Key features: - Encrypts the entire vault with AES-256-GCM. The master password is never stored and cannot be recovered by the developer. - Shows a compact account picker beside sign-in fields. Choose with the Arrow keys and fill with Enter, or use the Ctrl + Shift + L shortcut. - For reliably identified multi-step sign-ins, explicitly fill the username first and choose the credential again on the password step. Nothing submits automatically. Recognized verification-code and tenant fields are excluded from account filling; ambiguous account fields are skipped. - Matches the exact scheme, hostname, and port by default. An optional path prefix can narrow a credential further, but matching never broadens silently to a top-level domain. - Searches name, username, origin, port, path, and notes with multiple terms. Search supports Chinese text, full Pinyin, Pinyin initials, English initials, and conservative typo tolerance. Password contents are never indexed or searched. - Offers separate, default-off save reminders for all HTTPS websites with one explicit authorization, or only selected exact origins. After recognized sign-in, registration or password-change submission, review and edit the proposed account/password before confirming a save or update. Both typed and generated passwords work. A missing account is left for you to enter, not guessed; unchanged credentials stay quiet. Not now dismisses one review; Never remind me excludes that exact site origin. - Creates, views, copies, edits, and deletes credentials, and provides encrypted backup export plus verified preview and rollback-protected restore. - Generates strong random passwords locally (12–64 characters; default 20). On recognized HTTPS registration or password-change forms, explicitly use one in the new and confirmation fields. Review saving only after you submit the website, not immediately after filling. It never submits the form or replaces the current-password field with the new password. Site exclusions still apply. - Keeps encrypted recovery for the latest 20 generated passwords for 30 days, and the ten most recent replaced passwords per credential. History restore changes only the local vault, not the website account. Expired generated records are removed on the next unlocked vault access; exported backups retain their own encrypted snapshots. - Defaults to a 15-minute idle lock, with longer intervals and session-only unlock available. Separately confirmed Never auto-lock persists a raw unlock key in your browser profile across restarts, without OS keychain protection. Manual lock or switching policy removes it; encrypted backups exclude it. - Optional all-HTTPS suggestions detect sign-in fields and show a quiet, dismissible entry without opening the toolbar. Exact-origin account selection and new-password guidance remain beside the field; filling requires your action. - Provides Simplified Chinese, English, and Follow browser language choices, plus light, dark, and Follow system themes. Privacy and permissions: Aperture Vault has no remote server, cloud sync, advertising, analytics, or telemetry. Credentials, searches, site information, and usage history are not sent to the developer or third parties. Site access is optional. Global field suggestions and global submitted-save reminders are separate, default-off choices; migration/import never enables them, and suggestions alone do not capture typed passwords. Both share an explicitly granted HTTPS permission, removed only when both are off. Per-site preferences remain if the browser also removes narrower grants, but those grants must be reauthorized before use. Generated Use prepares a metadata-only, exact-form one-shot submission association for up to ten minutes, surviving closure of its generator. No username or password is stored in that association. Submitted review data remains in trusted memory-backed session storage for at most two minutes; every credential write still requires confirmation. Encrypted generation recovery is kept independently. Known boundaries: This release does not provide cloud or cross-device sync, passkey management, or master-password recovery. Save detection is conservative: it recognizes native submissions and trusted clicks on explicit sign-in, registration and password-change actions in reliable local forms. It never captures general typing, intercepts fetch/XHR or infers website success. Ambiguous identities/password fields, mismatched confirmation, OTP-only and payment contexts are excluded. Manual reading or entry remains available for unsupported forms. HTTP filling remains manual; websites inaccessible to the developer are not claimed as tested. Generated filling requires a high-confidence HTTPS new-password form and checks the selected fields again before filling. Ambiguous, changed, cross-origin or incompatible fields are refused; manual use remains available through the manager. It does not claim that the sign-in succeeded, and cannot determine whether a website accepted a new password.