KittyLock
Password Management System
First 4 characters of the master password:
Password Management System
KittyLock does not keep your passwords. They are encrypted in the browser and stored only on your Google Drive. The same vault is built for every platform: Chrome works today, and other browsers are on the way.
Features
There is no KittyLock account and no cloud of ours. The vault is encrypted in the browser and written only to your Google Drive.
Passwords are saved only in the AppData folder of your Google account. It does not appear in ordinary Drive, and only KittyLock signed in as you can reach it. There is no other server.
Day-to-day unlock uses the first 4 characters of your master password. The full password is still there when you need it. There is no separate PIN.
AES-GCM, the scheme validus-enc-v1, runs in the browser. Only an unreadable file leaves the device.
Because passwords live in your Google account, they are not stuck on one computer. When a new browser arrives, it opens the same vault.
Cross-platform
The vault is not tied to one browser. It lives on your Google Drive, so any KittyLock can open it wherever it runs. Today that is Chrome. The rest is still being built.
The extension you can add now. Passwords go only to your Drive.
In development. The same encrypted vault, with no password export.
Planned. Not ready to install yet.
Apps outside the browser are planned and not finished.
How it works
No KittyLock account. Chrome and your Google account are enough. Passwords stay on your Drive.
Add KittyLock to Chrome in one click. It is ready as soon as it is installed.
Sign in with Google. The encrypted vault is written only to your Drive AppData. KittyLock never sees your Google password.
Choose a master password. Quick unlock uses its first 4 characters, the same way the app does.
Security
Passwords are encrypted in the browser with validus-enc-v1 (AES-GCM) before they go anywhere. Your Google Drive receives only the encrypted file. KittyLock has no server that holds passwords.
AES-GCM encryption
Only your AppData
Google stores the encrypted file in your account. KittyLock does not store passwords. Without the key, the file cannot be read.
FAQ
Short answers before you add the extension to Chrome.
Yes. Each record is encrypted in your browser with AES-GCM, using the validus-enc-v1 format, before it leaves the device. The key comes from your master password and is never sent to a KittyLock server. Google Drive receives only an encrypted file that cannot be read without the key.
Only on your Google Drive, in the AppData folder of your account. That folder is not listed in ordinary Drive. Only KittyLock, signed in with your Google account, can read and write it. There is no KittyLock server holding passwords.
They are the first 4 characters of your master password, a shortcut for quick unlock. There is no separate PIN. If you do not enter them, unlock with the full master password. We cannot reset it for you, because we do not store it.
The vault is not tied to one computer: it lives on your Google Drive. Today KittyLock runs in Chrome. Safari, Firefox, and other platforms are still in development and will be available soon. When they arrive, they open the same encrypted file. You will not need to move passwords.
Yes. It is free to use, with no subscription and no hidden fees. Today you need Chrome and a Google account. The encrypted file on your Drive uses a negligible amount of space.
No subscription
Add KittyLock to Chrome. Passwords stay only on your Google Drive, ready for the platforms that are still on the way.