Aar318's Session Vault от Aar318

Aar318's Session Vault

Save multiple named login sessions for a website and load them from one compact toolbar vault. Session Vault is designed for people who regularly move among personal, work, family, test, or media-service accounts without maintaining a separate browser profile for every account.

Getting Started

1. Pin Session Vault to the browser toolbar.
2. Open a supported website and sign in to an account.
3. Select Session Vault, choose Save current, and name the profile.
4. Use Re-auth to clear the current session locally, sign in to another account, and save it as another profile. Avoid the site's own Sign out command because it may revoke the saved token server-side.
5. Select Load on a saved profile. The current site session is replaced and the tab reloads.

Key Features

• Multiple Profiles Per Site: Save, name, annotate, color-label, update, rename, export, and delete multiple sessions for each website origin.
• Complete Session Capture: Capture cookies, including HttpOnly cookies, plus selected localStorage and sessionStorage data.
• Fast Account Switching: Replace the active site's cookies and selected web storage, then reload to apply the chosen profile.
• Safe Re-authentication: Clear the site's local session without invoking its normal sign-out flow, then reload and sign in again when adding another account.
• Manual-Only Profiles: Every completed capture creates exactly one profile. Loading and re-authentication never create automatic profiles or backups.
• Global Session Manager: Use a grouped, collapsible All Sites overview with search and favorites-first sorting to manage sessions from every saved website.
• Clean Transfer Workflows: Export and import remain available through downloads and file selection in one visible vault interface. Imports restore valid included preferences, provide clear completion feedback, and can immediately start when an encrypted backup's passphrase was already entered.
• Verified Encrypted Backups: Export one profile, the current site, the active profile, or the complete vault. All Sites exports refresh directly from current vault storage and verify every selected profile before downloading. Exports use unique timestamps and offer AES-GCM protection with a four-character passphrase or PIN minimum.
• Password Tools: Generate ambiguity-free random characters or memorable real-word combinations, then preview, refresh, reveal, copy, and apply the result with clear password controls.
• Controlled Import: Merge matching profile IDs or import copies with origin, cookie, schema, and size validation plus visible success or failure feedback.
• Optional Master Password: Encrypt saved profile records at rest, unlock them for the browser session, lock them on demand, and optionally reuse the unlocked password for protected exports and imports.
• Safer Changes: Load confirmations are enabled by default and can be replaced with optional One-click Load. Separate confirmations protect overwrites and other destructive actions. Imported and restored profiles remain locked to their exact website origin.
• Complete Settings Tools: Export, import, reset, or clear settings separately from saved profiles.
• Personalized Interface: Choose dark, light, or system appearance plus Emerald, Blue, Purple, Amber, or Rose accents.
• Accessible Controls and Shortcuts: Use the toolbar action, Alt+Shift+V, or right-click commands for opening, saving, re-authentication, Ko-fi, and Donate. Responsive, keyboard-accessible controls include explanatory tooltips, a fully visible title with the active website shown compactly on its right, and consistent project-icon branding throughout Profiles, Settings, and About.

New Features (v1.0.0.1)

• All Sites backups now refresh from current vault storage and verify that every selected session profile is present before a file is downloaded.
• Full-vault imports now restore valid preferences included in the backup along with the saved session profiles.
• Opening the toolbar vault now closes an already-open injected vault panel so only one complete interface is visible at a time.

Permissions

• Cookies: Reads, creates, and removes cookies only to capture, restore, or clear sessions at your request.
• Website Access: Allows session work on the website open in the active tab and supports cookies belonging to that site.
• Scripting: Reads and restores localStorage and sessionStorage in the active tab after the user opens or invokes the extension.
• Storage: Keeps settings and saved session profiles inside the local browser profile.
• Context Menus: Adds user-invoked toolbar-menu shortcuts and support links.

Privacy and Security

Session Vault has no analytics, advertising, telemetry, remote code, or automatic network service. Vault data remains in the local browser profile unless you explicitly export it. Ko-fi and Donate open only when selected.

Saved sessions are credentials: anyone with access to them may gain access to the associated accounts. Optional master-password protection encrypts saved profile records at rest; index metadata and settings remain visible. Without it, extension storage is not passphrase-encrypted at rest. Profile exports offer AES-GCM protection and enable it by default; treat every unencrypted export like a password.

• Privacy policy: https://gist.github.com/aar318/9d4fc167a12546f162bcef3b91322aad

Limitations

Session Vault captures cookies, localStorage, and sessionStorage. It does not capture IndexedDB, Cache Storage, service-worker state, passkeys, device-bound tokens, HTTP authentication, or server-side session state. Some services may invalidate restored sessions or require re-authentication, especially after password, security, device, or location changes. Selecting Sign out on a website can revoke the saved token on its server, which local restoration cannot undo. Profiles are isolated by exact website origin, so related subdomains may need separate profiles.