Aperture Vault · Exact Autofill

A local encrypted vault that matches credentials by scheme, host, and port.

Aperture Vault is a local-first password manager for Chrome and Microsoft Edge. It keeps credentials encrypted in the current browser profile and matches sign-in pages by exact scheme, hostname, and effective port, so accounts for different protocols or ports are not silently mixed together. Key features: - Keeps daily tasks together in one compact quick panel: Accounts, Generate, and Recent. Open it from the toolbar; use the separate manager for full credential editing, backups, and settings. - Encrypts the entire vault with AES-256-GCM. The master password is never stored and cannot be recovered by the developer. - Shows a compact account picker beside sign-in fields. Choose with the Arrow keys and fill with Enter. The suggested shortcut is Ctrl + Shift + L on Windows and Command + Shift + L on macOS; Guide and shortcuts shows the browser's actual assignment. - For reliably identified multi-step sign-ins, explicitly fill the username first and choose the credential again on the password step. Nothing submits automatically. Recognized verification-code and tenant fields are excluded from account filling; ambiguous account fields are skipped. - Matches the exact scheme, hostname, and port by default. An optional path prefix can narrow a credential further, but matching never broadens silently to a top-level domain. - Searches name, username, origin, port, path, and notes with multiple terms in the manager and quick panel. Search supports Chinese text, full Pinyin, Pinyin initials, English initials, and conservative typo tolerance. The quick panel separates This website from All accounts; searching all accounts does not permit filling an unrelated website. Password contents are never indexed or searched. - Offers separate, default-off save reminders for all HTTPS websites with one explicit authorization, or only selected exact origins. After recognized sign-in, registration or password-change submission, review and edit the proposed account/password before confirming a save or update. Both typed and generated passwords work. Enter a missing username, or explicitly save a password-only entry; an empty username never guesses an existing account to update. Identified accounts with unchanged credentials stay quiet. Not now dismisses one review; Never remind me excludes that exact site origin. - Creates, views, copies, edits, and deletes credentials, and provides encrypted backup export plus verified preview and rollback-protected restore. - Generates strong random passwords locally (12–64 characters; default 20). The Generate tab displays a fresh password with inline Copy and visible length/character controls. Opening it prepares one encrypted, recoverable candidate; switching tabs does not silently regenerate it. On recognized HTTPS registration or password-change forms, explicitly use one in the new and confirmation fields. Review saving only after you submit the website, not immediately after filling. It never submits the form or replaces the current-password field with the new password. Site exclusions still apply. - Finds generated passwords in Recent without visiting Settings. Each record shows its website origin, or No linked website, and generation time; passwords stay masked until an explicit reveal or copy. Recover the exact saved value into Generate without creating a replacement. Direct Use is available only for a compatible, still-bound same-origin form; other records remain copy/recovery-only. - Keeps encrypted recovery for the latest 20 generated passwords for 30 days, and the ten most recent replaced passwords per credential. Credential password history remains in the manager's details view. History restore changes only the local vault, not the website account. Expired generated records are removed on the next unlocked vault access; exported backups retain their own encrypted snapshots. - Keeps unfinished save review while you switch within the quick panel, without writing a credential early. A newer submission requires renewed review; locking, expiry or cancellation clears the temporary review. Full credential writes always require your confirmation. - Master-password mode defaults to a 15-minute idle lock, with longer intervals and session-only unlock available. Separately confirmed Never auto-lock persists a raw unlock key across browser restarts; manual lock or changing policy removes it. - Optional Device-only mode needs no master password, even after restart. The random encryption key stays in this browser profile without OS keychain protection; anyone able to use or read the profile may access the vault. Set a master password before locking or enabling timed locking. Exports require a separate backup password and never contain the device key. Restore explicitly chooses either mode; existing master-password vaults and backups remain supported. User-chosen master and backup passwords require at least six characters. - Optional all-HTTPS suggestions detect sign-in fields and show a quiet, dismissible entry without opening the toolbar. Exact-origin account selection and new-password guidance remain beside the field; filling requires your action. - Provides Simplified Chinese, English, and Follow browser language choices, plus light, dark, and Follow system themes. Privacy and permissions: Aperture Vault has no remote server, cloud sync, advertising, analytics, or telemetry. Credentials, searches, site information, and usage history are not sent to the developer or third parties. Site access is optional. Global field suggestions and global submitted-save reminders are separate, default-off choices; migration/import never enables them, and suggestions alone do not capture typed passwords. Both share an explicitly granted HTTPS permission, removed only when both are off. Per-site preferences remain if the browser also removes narrower grants, but those grants must be reauthorized before use. Generated Use prepares a metadata-only, exact-form one-shot submission association for up to ten minutes, surviving closure of its generator. No username or password is stored in that association. Submitted review data remains in trusted memory-backed session storage for at most two minutes; every credential write still requires confirmation. Encrypted generation recovery is kept independently. Known boundaries: This release does not provide cloud or cross-device sync, passkey management, or master-password recovery. Save detection is conservative: it recognizes native submissions and trusted clicks on explicit sign-in, registration and password-change actions in reliable local forms. It never captures general typing, intercepts fetch/XHR or infers website success. Ambiguous identities/password fields, mismatched confirmation, OTP-only and payment contexts are excluded. Manual reading or entry remains available for unsupported forms. HTTP filling remains manual; websites inaccessible to the developer are not claimed as tested. Generated filling requires a high-confidence HTTPS new-password form and checks the original page, frame, document and selected fields again before filling. Ambiguous, changed, cross-origin or incompatible targets are refused. You can still generate or recover a password in the quick panel and explicitly copy it for manual use. It does not claim that the sign-in succeeded, and cannot determine whether a website accepted a new password.