AtStash is a secure bookmark and password manager for your browser. AES-256-GCM encryption, one-click auto-fill, and encrypted backups — with no account, no cloud, and no tracking. Ever.
A focused feature set built around one principle: your data stays yours.
Every bookmark and login is individually encrypted with AES-256-GCM. Keys are derived from your master password with PBKDF2 (100,000 iterations, SHA-256).
Organize bookmarks with nested folders, color your workflow with tags, and find anything with instant search across titles, URLs, usernames and tags.
AtStash detects login forms and shows a "Fill saved login" pill. One click fills username and password — even on single-page apps.
Export your whole vault as a self-contained .atstash file, then import it on any machine. Items merge by ID — nothing is ever lost or duplicated.
Generate cryptographically random passwords with guaranteed uppercase, lowercase, numbers and symbols — right inside the add-login form.
Auto-lock after a timer you choose. Press Ctrl+Shift+S to open, Ctrl+Shift+L to lock instantly. Dark and light themes included.
A look at the popup, the options page, and the auto-fill experience. Clean, focused, theme-aware.
AtStash is zero-knowledge by design. There is no server to trust — encryption happens entirely in your browser.
Every item is stored as an individually encrypted AES-256-GCM blob in chrome.storage.local. Folder and tag names are metadata; secrets never touch disk in plaintext.
Your master password is stretched with PBKDF2-HMAC-SHA256 at 100,000 iterations — the OWASP-recommended minimum — before a single byte is decrypted.
The derived key lives in memory and in chrome.storage.session (in-memory only, cleared on browser restart). Auto-lock expires it on your schedule.
The extension requests no network permissions and collects zero telemetry. It works fully offline. Host permissions exist solely for auto-filling forms.
Free forever. No account, no sign-up — download, load, and create your master password.
Install from the packaged zip or build from source.
atstash-1.0.0-chrome.zip
Grab it from the official Add-ons store, or load temporarily for testing.
addons.mozilla.org/addon/atstash
Clone or extract the source and build it yourself — fully open.
npm install && npm run build
Built with TypeScript, React, WXT and the Web Crypto API. Open source, MIT licensed.
A secure, local-first bookmark & password manager. Your data never leaves your device — encrypted at rest, decrypted only in memory, and recoverable only with your master password.
ATinfotech builds practical, privacy-first web tools. Visit us to explore our products and services.