CyberForget Vault

About

CyberForget Vault is a zero-knowledge password manager that keeps your credentials safe with military-grade encryption — and autofills them anywhere with one click.

  YOUR DATA, YOUR KEY
  Unlike other password managers, CyberForget Vault never sees your master password. All encryption and decryption happens locally on your device using AES-256-GCM. The server stores only encrypted blobs — we cannot read your passwords even if
  compelled.

  FEATURES

  🔐 Zero-Knowledge Encryption
  AES-256-GCM encryption with PBKDF2 key derivation (100,000 iterations). Your vault is encrypted before it leaves your browser. No plaintext ever touches our servers.

  ⚡ One-Click Autofill
  Instantly fill username and password fields on any website. The extension detects the current site and surfaces matching credentials automatically.

  📊 Password Health Score
  Every password gets a strength score. See weak passwords at a glance and regenerate them with the built-in password generator.

  🔄 Cross-Device Sync
  Sign in with email or Google and your encrypted vault syncs across all your Chrome browsers. Same vault, same keys, everywhere.

  ⏱️  Auto-Lock Timer
  Vault automatically locks after 15 minutes of inactivity. Your decrypted data stays in memory only while you're using it.

  🎲 Strong Password Generator
  Generate cryptographically random passwords with customizable length, uppercase, lowercase, numbers, and symbols.

  📋 Smart Clipboard
  One-click copy for usernames and passwords. Clipboard is automatically cleared after use for security.

  HOW IT WORKS

  1. Create an account (email or Google sign-in)
  2. Set a master password — this NEVER leaves your device
  3. Save credentials or generate strong passwords
  4. Your vault is encrypted locally, then synced to our servers
  5. Open any site, click Autofill — done

  SECURITY ARCHITECTURE

  - Master password → PBKDF2 → AES-256 key (local only)
  - Vault data encrypted with AES-256-GCM before transmission
  - Server stores only ciphertext — cannot be decrypted without your key
  - 128-bit entropy recovery phrases for account recovery
  - All crypto via browser-native WebCrypto API — no third-party crypto libraries

  PRIVACY

  We collect only your email (for authentication) and encrypted vault data (which we cannot read). No browsing history, no analytics, no tracking. Full privacy policy available on our website.

  IMPORTANT: If you lose your master password AND recovery phrase, your vault cannot be recovered. We have no way to decrypt your data. This is by design — true zero-knowledge means zero backdoors.

  Part of the CyberForget privacy suite — building free, open-source tools for digital privacy.