Bazinet Vault

Autofill, generate and save passwords — and refuse to fill look-alike sites. Zero-knowledge: secrets never leave your device.

Bazinet Vault is a zero-knowledge password manager. Your entries are encrypted and decrypted on your own device, and your master password never leaves it. The server only ever stores ciphertext it cannot read. WHAT IT DOES • Autofills usernames and passwords on sign-in forms • Offers to save or update a login after you sign in • Generates strong random passwords right in sign-up forms • Creates and uses passkeys, stored in your encrypted vault • Fills saved identities (name, address, phone) into address and contact forms • Copies secrets to the clipboard and clears them about 30 seconds later • Locks itself after 10 minutes of inactivity AUTOFILL THAT CHECKS WHERE IT IS Autofill is the moment a password manager can be tricked, so every fill is checked against the address your browser reports, not what the page claims: • A login is only offered and filled on the site it was saved for (including that site's own subdomains) • Look-alike domains are refused and flagged, with a clear warning naming both addresses • Separate sites on shared hosting (github.io, vercel.app, netlify.app and thousands more) are kept apart, using the full Public Suffix List • A password saved on a secure (https) page is never filled into an insecure (http) one • Nothing is filled into hidden or invisible fields ZERO-KNOWLEDGE BY DESIGN Your vault key is derived from your master password in your browser with Argon2id and is kept in session memory only, never on disk. Entries are sealed with AES-GCM before they leave your device. Your vault is synced through bazinet.net, which receives nothing it can decrypt. FOR CÉGEP STUDENTS (OPTIONAL) If you use Bazinet Horaire, the extension can read your LÉA assignments, your Mio messages and cancelled-class notices from Omnivox and bring them into your agenda. It uses the Omnivox session you are already signed in to in this browser. Your Omnivox password is never read or stored, the pages go straight from Omnivox to your agenda, and nothing is added until you confirm it. If you don't use Horaire, this never runs. OPEN TO INSPECTION Extension code is readable by anyone who installs it, so this one is deliberately not obfuscated. Every direct-download build is published with a SHA-256 checksum you can verify. Requires a free Bazinet account. Works alongside the Bazinet Vault web app and desktop app.