jbrowser.services.vault

Generated from the source code of JBrowser 1.5.3.

Encrypted local password vault.

Entries are serialised to JSON and sealed with AES-256-GCM using a random 256-bit key.
The vault key is protected either by Windows DPAPI (default — bound to the Windows user account, transparent unlock) or by a master password (Scrypt KDF, n=2^17).
Nothing sensitive is ever written to disk in plaintext.

Credential#

class Credentialsource

Attributes

Name	Value
`origin`	`str`
`username`	`str`
`password`	`str`
`space_id`	`str = ''`
`note`	`str = ''`
`id`	`str = field(default_factory=lambda: uuid.uuid4().hex[:16])`
`created`	`float = field(default_factory=time.time)`
`updated`	`float = field(default_factory=time.time)`
`last_used`	`float = 0.0`

property hostsource

class VaultError(Exception)source

class PasswordVault(QObject)source

PasswordVault(path: Path, parent: QObject | None=None)

Signals

Signal	Arguments
`changed`	`()`
`lockChanged`	`(bool)`

Attributes

Name	Value
`AUTO_LOCK_MS`	`30 * 60 * 1000`

property modesource

property is_lockedsource

property existssource

ensure_unlocked() -> boolsource

Unlock transparently when protected by DPAPI. Master-password vaults need unlock().

unlock(password: str | None=None) -> boolsource

lock() -> Nonesource

verify_password(password: str) -> boolsource

set_master_password(new_password: str) -> boolsource

Switch to (or change) master-password protection. Vault must be unlocked.

remove_master_password() -> boolsource

Switch back to transparent DPAPI protection. Vault must be unlocked.

entries() -> list[Credential]source

get(cid: str) -> Credential | Nonesource

find_for_url(url: QUrl | str, space_id: str='') -> list[Credential]source

save_credential(url: QUrl | str, username: str, password: str, space_id: str='') -> Credentialsource

has_exact(url: QUrl | str, username: str, password: str, space_id: str='') -> boolsource

update(cid: str, **fields) -> Nonesource

remove(cid: str) -> Nonesource

mark_used(cid: str) -> Nonesource

never_list() -> list[str]source

is_never(host: str) -> boolsource

add_never(host: str) -> Nonesource

remove_never(host: str) -> Nonesource

import_csv(path: str) -> intsource

Import a Chrome / Edge / Firefox password export (name,url,username,password[,note]).

password_problems(entries: list[Credential]) -> dict[str, list[str]]source

Map credential id to a list of problems ("weak", "reused"); healthy logins are omitted.

Everything is computed locally from the decrypted vault; nothing leaves the machine.