Silo Credential Manager

Encrypted password manager. Local by default, with optional sync via your Google account through Chrome Sync - never our server.

Silo — a password manager that keeps everything on your device, by default. Silo stores your logins encrypted with AES-256, unlocked only by a master password that never leaves your browser. There's no account to create, no company server involved, and no data collected — your vault lives in Chrome's own local storage unless you explicitly turn on sync. WHY INSTALL SILO Most password managers ask you to trust a company's cloud. Silo flips that: everything is local-first, and every feature that reaches beyond your device — sync, backup export — is something you switch on yourself, not something that happens by default. WHAT IT DOES Save and autofill logins. A small icon appears on username and password fields (including two-step logins like Google's); click it to fill in a saved entry. Save-password prompts. Type a new or changed login and submit the form — Silo offers to save it, the same way built-in browser password managers do. Password generator with a strength meter, built into the popup and the add/edit screen. Optional PIN unlock. Set a 4-6 digit PIN so you don't have to type your full master password every time — completely optional, and your master password always still works. Optional sync via Chrome. Turn it on and your encrypted vault (and your customization settings) travel through Chrome's own built-in sync, tied to whichever Google account is already signed into your browser. No separate login, no server of ours involved. Import from elsewhere. Bring in passwords already saved in Chrome, Firefox, Edge, or most other password managers via CSV export — available during setup or anytime in Settings. Encrypted backup export/import. Export a password-protected backup file anytime; restore it on setup to move to a new device without sync. Customizable. Pick an accent color, and decide whether the save-prompt and autofill icon show up at all. HOW YOUR DATA IS HANDLED Your master password is never stored — it's re-derived each time you unlock the vault (PBKDF2, 300,000 iterations) and kept only in memory. Vault entries are encrypted with AES-256-GCM before they're written to disk. A wrong password simply fails to decrypt; there's no separate password hash sitting around to attack. If you turn on sync, your already-encrypted vault is handed to Chrome's own sync infrastructure — Silo has no server of its own to send it to. If you never turn sync on, nothing about your vault ever leaves the device it's stored on. PERMISSIONS, PLAINLY Storage: saves your encrypted vault and preferences locally, and to Chrome Sync only if you opt in. Alarms: runs the auto-lock timer you configure. Access to websites: lets Silo detect login forms so it can offer to autofill or save credentials. This runs entirely in the page; nothing is sent anywhere except Silo's own background script, on your own device. Full privacy policy: https://silo.laveryjonez.uk