All 74 Dependencies
Every package Bramble depends on, ranked by repo health score.
Bramble is a local-first password manager built around a simple premise: your vault never touches a server you don't control. Every credential is encrypted on your own device — inside a browser extension's private storage on desktop, or in app-private encrypted storage on iOS and Android — and stays there. There's no account to create and no company holding a copy of your secrets to lose in a breach.
To use one vault across several devices, Bramble syncs it directly, peer-to-peer, over an end-to-end encrypted WebRTC channel, with a minimal Nostr relay used only to help devices find each other, never to carry vault data. A single Rust cryptography core, compiled to WebAssembly in the browser and to a native library on iOS and Android, does all key derivation and encryption behind a LUKS-style envelope scheme: one random Vault Encryption Key (VEK) protects every entry, each unlock method (master password, hardware security key, or recovery code) wraps its own copy of that VEK in its own key slot, and every entry additionally gets its own per-entry key wrapped under the VEK. Argon2id derives password-based keys, AES-256-GCM does the encrypting, and derived keys are wiped from memory after use.
The same vault format and crypto core back a Chromium browser extension, a Firefox add-on, and native iOS and Android apps with system AutoFill, biometric unlock, and passkey support built on WebAuthn. Entries cover logins, payment cards, secure notes, SSH keys, and TOTP codes, with smart URL matching so subdomains of the same site share one entry. For anyone who wants a copy off-device, Bramble exports encrypted `.bramble` backup files, and the browser extension can schedule automatic encrypted backups to Dropbox, S3-compatible storage, or a self-hosted WebDAV server.