One private workspace.
Save logins, API keys, private notes, and recovery codes. Search, edit, and organize by type. Every entry field is encrypted at rest.
AFTERCURVE VAULT / VERSION 1.0.0
Your secrets.
Your control.
An offline home for passwords, API keys, and private notes. Encrypted on your device. Built to move with you.
Desktop Chromium extension · Manual installation
No account, subscription, or contract deployment.
My vault 04GeneratorVault healthDevice transferBackups◎ LOCAL & ENCRYPTEDYOUR PRIVATE WORKSPACE
Everything,
in confidence.
Search your vault ⌕
Everyday accountsLOGIN · ••••••••••••
↗Developer keysAPI KEY · ••••••••••••
↗For your eyes onlyPRIVATE NOTE
↗A way backRECOVERY CODES
↗ NO RUNTIME NETWORK REQUESTSINTERFACE ILLUSTRATION
RELEASE STATUS
Functional, downloadable software with published source and test results. Independent security review, actual-browser validation, and a signed store listing remain outstanding. Read the validation record ↗
01 / EVERYDAY UTILITY
BUILT AROUND WHAT YOU KEEPA useful layer
of personal security.
Keep your essentials together.
Keep the control on your device.
Make it unpredictable.
Create random passwords locally, from 16 to 128 characters. Check saved logins for reused, short, or obviously patterned passwords.
Deliberate by design.
Open Vault from a login page and explicitly fill a matching entry. Exact HTTPS origin checks. No automatic submission or permanent access to every website.
A way back.
Export encrypted backups. Restore an empty installation or preview an import into an existing vault. Your current entries are never overwritten.
Close the door.
Lock immediately, on a hidden tab, or after inactivity. Change your master password with a fresh encryption key for the entire vault.
Move with confidence.
Transfer entries offline using ML-KEM-768, with independent verification of both the receiving device and the encrypted package.
02 / BEYOND THE DEVICE
Read the transfer design ↗A new key.
A verified move.
Post-quantum key establishment where it has a specific job: encrypting a transfer to your next device.
A one-time request. A 30-minute window. Two complete fingerprints checked through a trusted separate channel.
- 01
Request on the receiving device.
Create a fresh receive key and share the request file. Give the sender its verification fingerprint separately.
- 02
Verify. Encrypt. Send.
The sending device checks the fingerprint and encrypts the entries. Share the resulting package and independently communicate its fingerprint.
- 03
Review before you import.
The receiving device verifies the package, previews the entries, and consumes the request when the import is saved.
Vault protects stored secrets and verified transfers. It does not change Ethereum wallet signatures or make an existing wallet quantum-resistant.
03 / GET STARTED
VERSION 1.0.0 / DESKTOP CHROMIUMMake room
for privacy.
Install the downloadable extension on a desktop Chromium browser using Developer mode. There is no Chrome Web Store listing yet.
Download extension ↓Extract into a permanent folder.
Download the ZIP and extract it. Keep the folder where you intend the extension to remain installed.
Load the extension.
Open
chrome://extensions, enable Developer mode, choose Load unpacked, and select the extracted folder containingmanifest.json.Create your vault.
Pin Aftercurve Vault and click its toolbar icon. Choose a long, unique master password of at least 16 characters.
Export an encrypted backup.
Keep a backup and its password somewhere you control. Losing the password means losing access; there is no reset service.
Updating an existing installation?
Export a backup, replace the files in the same extension folder, then use Reload on the existing extension entry. Uninstalling deletes its local storage. Full installation and update guide ↗
CLEAR FROM THE START
The details
are yours to inspect.
What is quantum-resistant here?+
Offline device transfer uses the standardized ML-KEM-768 key-establishment algorithm. Stored vault contents use AES-256-GCM with a master-password key derived by Argon2id. This is a specific implementation with stated assumptions, not a promise that all passwords or all of Ethereum become quantum-proof. See the security page for parameters and limitations.
Does Aftercurve receive my data?+
The extension makes no runtime network requests and has no backend, analytics, account, or cloud sync. It saves ciphertext in your browser profile. Explicit clipboard actions and exported files leave that storage boundary; protect them accordingly. Opening a documentation link visits this website separately.
Is this independently audited?+
No. Published automated checks cover encryption vectors, backup and transfer flows, storage conflicts, and mocked extension boundaries. Actual-browser validation and independent application and cryptographic review are still outstanding. Read the validation record before entrusting valuable secrets to this release.
What happens if I forget the password?+
There is no password reset, support override, or recovery server. An encrypted backup also needs the password used when it was created. Changing your master password later does not update old backups.
Can I use it on my phone or Firefox?+
This package targets desktop Chromium browsers. Mobile and Firefox packages are not included. The source and build instructions are available for inspection.
OWNERSHIP, BEYOND THE CURVE.