The full catalogue
Every module in Vigil
24 modules across 7 categories, under a single multi-tenant, role-based login. Pick a module. Every lifecycle below is the real one, straight out of the product.
Built in, no add-ons
Password Vault
Security & AccessA team password manager where the server can never read your secrets. Everything is encrypted in the browser, shared per folder, revoked by re-keying, and audited on every reveal.
- PBKDF2-SHA256 at 600k iterations derives a per-user data key; every entry is AES-256-GCM encrypted before it leaves the browser
- Shared folders wrap the folder key per member with RSA-2048-OAEP, so sharing never exposes a plaintext key to the server
- Revoke means re-key: the folder key rotates and its entries re-encrypt, so a cached key cannot open anything written afterwards
- An MV3 Chrome and Edge extension autofills with a match-count badge, clears the clipboard after 30 seconds and auto-locks in the background
- Folders, tags, favourites, secure notes and a password generator, with per-folder access by role or user
- Every reveal, share, edit and export writes an audit row naming who did it
Real lifecycleOne centre, every connection
What protects a single entry
One secret sits at the centre. Around it are the layers that keep it that way: the key derivation that turns a master password into a key the server never sees, the per-entry cipher, the per-member folder wrapping, the re-key on revoke, and the extension that uses the secret without ever displaying it. The audit log watches all of them.
PBKDF2-SHA256600k iterations
Per-user data keyDerived in the browser
AES-256-GCMPer entry
RSA-2048 sharingFolder key per member
Revoke = re-keyOld keys go stale
Browser extensionAutofill, MV3
Clipboard auto-clear30 seconds
Audit every revealWho, what, when
Your secretServer stores ciphertext only
Zero-knowledge by construction feeds the engine the engine sends out