Offline password manager — AES-256-GCM vault, recovery key, dark mode. No accounts, no cloud, no tracking
Your passwords. Your device. Nobody else's server.
No accounts. No cloud. No tracking. No fees. Just one app that keeps your secrets encrypted on hardware you own.
- Double-click
LocalVault.html— opens in any browser, works fully offline. - Create your vault → pick a strong master password (min 12 chars).
- 💾 Save the recovery key shown once — it's your only way back in if you forget the password.
On Windows, double-click selfhosted/start-windows.bat. On macOS or Linux, open a terminal and run:
cd selfhosted
node server.jsThen open http://127.0.0.1:18765. The server keeps an encrypted copy of your vault on this computer. You can open this address in different browsers on the same computer to use the same vault. Use one browser at a time; changes do not appear in other open tabs automatically.
To start the server automatically when you sign in, run node setup.js from the selfhosted folder and follow the menu. To move an existing vault into the server, use the encrypted backup and restore steps in the self-hosted guide.
| Feature | Details |
|---|---|
| 🔑 Logins, Cards, Identities, Notes, SSH keys | Bitwarden-style + Add menu, per-type forms |
| 🎲 Generator | Passwords + passphrases, offline |
| 💓 Health report | Weak / reused / old passwords, optional breach check |
| 📁 Folders, ⭐ favourites, 🔍 instant search | Bitwarden-style sidebar |
| 🗑️ Bin with 30-day auto-expire | Recoverable deletes, bulk actions, and confirmation before moving entries to Bin |
| 📋 Duplicate entries | Duplicate from the entry menu or detail view, then edit the copy |
| 📥 Import / 📤 Export | CSV, JSON, Excel + encrypted backups, duplicate detection |
| 🔑 Recovery key | Forgotten master password? Reset it, keep your data |
| 🛡️ Re-prompt | Per-item "ask master password before showing" |
🌙 Dark mode, ⌨️ shortcuts (Ctrl+K, Ctrl+N, Esc) |
|
| 📅 Weekly auto-backup | Encrypted snapshots (keeps newest 4), restore any of them |
| How you open LocalVault | Where your vault is kept |
|---|---|
Open LocalVault.html |
Separately in each browser. Browsers do not share this vault. |
| Use the local server | In the browser and as an encrypted copy on this computer. Browsers using the server address share this vault. |
The server only saves encrypted vault data; it cannot read your passwords. The encrypted copy can restore your vault if browser data is cleared, but it is not a replacement for keeping a separate backup. Weekly snapshots stay in browser storage and are not included in the server's disk copy.
- Lock screen → Use recovery key → paste the key you saved at creation.
- Set a new password. Done — entries preserved, nothing lost.
- No key and no password? The vault is unrecoverable by design — delete and start over (or restore an encrypted backup file).
⚠️ Changing your master password or security level invalidates the old recovery key — generate a fresh one in Settings → Recovery key.
These apply whether you open the HTML file or use the local server:
- Keep your recovery key safe. There is no password reset. If you forget your master password and lose the recovery key, you cannot unlock the vault. Anyone with the recovery key can unlock it.
- Lock the app when you finish. It does not lock itself automatically.
- Make a backup you can keep elsewhere. Weekly snapshots are saved quietly in the browser, not downloaded as files. Use Download backup in Settings to save an encrypted backup file, and keep a copy somewhere safe.
- Be careful with exports. CSV, Excel, and plain JSON files show your passwords. Keep them private and delete them when you no longer need them.
📄 Option A — Open LocalVault.html: Each browser has a separate vault. Clearing that browser's saved data may erase its vault. To move it to another browser, download an encrypted backup and restore it there.
🖥️ Option B — Use the local server: The server must be running, and it is for this computer only. Browsers opened at the server address use the same vault, but they do not update each other right away. Use one browser at a time to avoid overwriting changes. The server keeps an encrypted copy of the main vault on this computer; weekly snapshots remain in each browser and are not included in that copy. Keep a separate encrypted backup file too.
Can I use it on my phone?
Yes — open the file or server address in Chrome/Safari and bookmark it. Same rules: that phone browser holds its own vault copy.
Can I run it on a Raspberry Pi?
Yes — pure Node, runs great on ARM. Install Node 20+ via NodeSource (Pi OS apt is usually too old), then node setup.js. It serves loopback-only, so use the Pi's own browser — or ask about LAN access before exposing it further.
Is it safe to put the server on my home network?
The vault stays encrypted either way (decryption happens in your browser), but the page itself would be reachable by anyone on the network. Loopback-only by default is the safe choice — don't port-forward it to the internet.
Bitwarden has X — do you?
Logins, cards, identities, notes, SSH keys, folders, TOTP, generator, health, import/export, recovery key, re-prompt, auto-backup. No cloud sync, no browser-extension autofill, no sharing/organizations — that's the offline tradeoff.
LocalVault.html— the entire app. Double-click to run.selfhosted/— loopback server + encrypted disk store + one-script setup (guide).README.md— browser and self-hosted features, usage, and limitations.esp-vault/README.md— ESPVault features, verified bug fixes, device limitations, and build/flash guidance.
| 📞 Method | 🔗 Details |
|---|---|
| Call / WhatsApp | +91-9974477759 |
| Telegram | @fusionautomate |
| eng.innovativ@gmail.com |
⭐ Star this repo if it helped you · 🔔 Follow Fusion Automate