🔒 Zero-knowledge. Always private.

Your passwords. Your encryption. Your control.

VaultHarbor is a zero-knowledge password manager. Credentials are encrypted on your device before they ever leave. The server only stores opaque blobs it cannot read.

Get the extension Learn more
Available for Chrome · Edge · Brave · More coming soon

Zero-knowledge

Only you can decrypt your data.

End-to-end encrypted

Encrypted on device before syncing.

Secure sync

Reliable and fast sync across your devices.

Open source

Transparent, auditable and community driven.

About

A password manager built on trust, not access

VaultHarbor keeps your logins, passwords, and secure notes in an encrypted vault that lives on your devices. When you save a credential, it is encrypted locally with keys derived from your master password, then synced to the cloud as unreadable data.

The browser extension brings VaultHarbor into your daily workflow: autofill on login pages, save new credentials as you sign up, update passwords when they change, and unlock your vault with a single master password.

The sync backend is self-hosted and open source, so you choose where your encrypted vault lives, and no vendor holds the keys to your data.

VaultHarbor

Secure. Sync. Everywhere.

Features

The essentials, secured. Nothing extra.

VaultHarbor includes only what matters in a password manager, so you can stay focused, safe, and in control.

Zero-knowledge encryption

Your vault is encrypted with AES-GCM on your device. The server only stores ciphertext it can never decrypt.

One-click autofill

Fill usernames and passwords on any site. VaultHarbor detects login fields and offers matching credentials.

Cross-device sync

Sign in on any browser with the extension. Your encrypted vault syncs automatically across devices.

Save & update prompts

Get prompted to save new logins when you sign up, and to update entries when a password changes.

Master password unlock

One master password derives your vault key locally. It never travels to the server, not even as a hash.

Self-hosted backend

Run your own sync server or use the hosted instance. Your encrypted data stays under your control.

Privacy first. Performance always.

No tracking. No ads. No unnecessary extras.

Just a secure password manager that works the way it should.

How it works

Simple on the surface, secure underneath

1

Create your account

Register with email and an account password. This authenticates you to the sync server; it does not encrypt your vault.

2

Set a master password

Choose a strong master password. VaultHarbor derives encryption keys locally and wraps your vault so the master password never leaves your device.

3

Save, sync, autofill

Add credentials to your vault. They encrypt on your device, sync as opaque blobs, and autofill whenever you need them.

Security

Two passwords, one principle: your data stays yours

VaultHarbor separates account login from vault encryption so your secrets remain protected even if credentials are reset.

Stored as hash only

Account password

Used to sign in to VaultHarbor and sync your vault across devices. Stored on the server as an Argon2id hash, never in plaintext.

Never sent to server

Master password

Derives the key that encrypts and decrypts your vault. Exists only on your device. VaultHarbor cannot recover it; only you can unlock your data.

Client-side only

End-to-end encryption

Vault contents are encrypted with AES-GCM before upload. The server sees only base64 ciphertext, revision numbers, and sync metadata.

Recovery option

Recovery key

If you forget your master password, a recovery key can re-wrap your vault key. Store it safely; VaultHarbor shows it once during setup.

Install

Get VaultHarbor on your browser

Available for Chromium browsers: Chrome, Microsoft Edge, and Brave.

Download from GitHub Releases
Latest build: vaultharbor-extension-0.1.0-chrome.zip
  1. 1 Download the release zip from GitHub Releases.
  2. 2 Unzip to a permanent folder; it must contain manifest.json at the root.
  3. 3 Open chrome://extensions (Microsoft Edge: edge://extensions).
  4. 4 Enable Developer mode (toggle in the top-right corner).
  5. 5 Click Load unpacked and select the unzipped folder.
  6. 6 Pin VaultHarbor to your toolbar and sign in to get started.
Manual installs do not auto-update. Official store listings below will enable automatic updates once published.
Chrome Web Store Coming soon
Microsoft Edge Add-ons Coming soon

Need help? Check the FAQ or contact support.

FAQ

Common questions

Quick answers about VaultHarbor security, installation, and your data.

What is VaultHarbor?

VaultHarbor is a zero-knowledge password manager. Your credentials are encrypted on your device before they are synced. The server stores only opaque encrypted blobs; it never sees your master password or plaintext vault contents.

Can VaultHarbor or the server see my passwords?

No. Your master password and decrypted vault never leave your device. The server stores only encrypted data it cannot read. VaultHarbor is designed so that even the operator cannot access your secrets without your master password.

What is the difference between my account password and master password?

Your account password signs you in to VaultHarbor and enables sync across devices. It is stored on the server as a secure hash. Your master password encrypts and decrypts your vault locally and is never sent to the server.

View all FAQ →
Support

VaultHarbor

Secure · Sync · Everywhere

Keep it free & independent

Support VaultHarbor

VaultHarbor is open source and free to use. Your support helps maintain our infrastructure, publish on official browser stores, and ship new features for everyone.

Sponsor on GitHub
MIT Licensed Open Source
Your support helps us

Store Publishing

Maintaining the app on the Chrome Web Store and Edge Add-ons for easy updates.

Sync Infrastructure

Keeping the sync API and database fast, reliable, and available worldwide.

Security & Compliance

Zero-knowledge architecture, secure hosting, and ongoing security improvements.

New Features

Building autofill, sync, and vault tools based on community feedback.