MMO Vault

MMO Vault is one HTML file that you open by double-clicking it. Everything happens in the browser: AES-256-GCM for the data, PBKDF2-SHA256 with 600,000 iterations to derive the key from your master password. What it writes is the vault itself — an encrypted file you can back up, copy to a stick or keep in a cloud of your choosing. There is no account and nothing to sign up for.

The page is not allowed to talk to anyone. Its Content Security Policy is default-src 'none'; connect-src 'none': no CDN, no web fonts, no telemetry, no update check. That is the point rather than a side effect — a password manager that cannot phone home asks you to trust the maths and nothing else.

Beyond plain login entries there are TOTP codes for two-factor authentication (RFC 6238, including scanning the QR code), encrypted attachments, freeform entries rendered as Markdown, full-text search with filters and deep links, CSV import and export, a password generator and an auto-lock. The interface is German and English and holds up from 320 pixels to a desktop screen. If you would rather serve it over a reverse proxy than pass the file around, there is a Docker image for that.

Two things the README states plainly and this page repeats: backups are mandatory, not optional, and there is no password recovery — no reset, no back door. Lose the master password and the file stays closed. That is what the design costs, and it is worth knowing before you put anything in it.