Open-source password manager with military-grade encryption.
🔒 Your passwords, encrypted on your device. No cloud. No subscriptions. No tracking.
Pre-built, cryptographically signed releases:
Available for:
- ✅ Windows 7, 8, 10, 11 (64-bit)
- ✅ macOS 10.13+ (Intel & Apple Silicon)
- ✅ Linux (Debian, Ubuntu, Fedora, AppImage)
All releases are GPG signed for security verification.
CoraleVault is a desktop password manager focused on security, privacy, and simplicity.
🔒 Security First
- AES-256-CBC encryption with HMAC-SHA256 authentication
- PBKDF2 key derivation (600,000 + iterations - OWASP 2025 compliant)
- Memory protection against RAM dumps
- Rate limiting against brute-force attacks
- Zero-knowledge architecture
🏠 Privacy by Default
- No cloud synchronization (your data never leaves your device)
- No telemetry or tracking
- No account required
- No company can access your data
🆓 Free Forever
- Open source (GNU GPL v3.0)
- No subscriptions or premium tiers
- No advertisements
- All features included
🔍 Transparent & Auditable
- Full source code available for security review
- No backdoors, no hidden tracking
- Community-driven development
- 🔐 Strong Encryption - AES-256 with HMAC-SHA256 authentication
- 🔑 Password Generator - Cryptographically secure random passwords
- 📋 Clipboard Auto-Clear - Passwords automatically cleared after 30 seconds
- 🔍 Fast Search - Quickly find any password
- 📂 Group Organization - Organize passwords into categories
- 📥 Import/Export - CSV import from Chrome, Bitwarden, and other managers
- 💾 Local Storage - Your vault file, under your control
- 🖥️ Cross-Platform - Windows, macOS, and Linux
- ☁️ Optional Cloud Sync - Self-hosted or managed sync service
- 📱 Mobile Apps - iOS and Android
- 🌐 Browser Extensions - Chrome, Firefox, Safari, Edge
- 👥 Vault Sharing - Share passwords with family or team (encrypted)
CoraleVault meets or exceeds industry standards:
NIST Compliance:
- ✅ NIST SP 800-132 (Password-Based Key Derivation)
- ✅ NIST SP 800-38A (Block Cipher Modes - AES-CBC)
- ✅ NIST SP 800-108 (Key Derivation - HKDF)
- ✅ FIPS 197 (Advanced Encryption Standard)
- ✅ FIPS 198-1 (HMAC)
OWASP Compliance:
- ✅ OWASP ASVS v4.0 Section 6 (Cryptographic Verification)
- ✅ OWASP Password Storage Cheat Sheet (2025)
- ✅ OWASP Top 10 Protection
Open source allows security researchers to verify there are no:
- ❌ Backdoors or hidden data collection
- ❌ Weak encryption implementations
- ❌ Security vulnerabilities
- ❌ Privacy violations
Trust through transparency.
Installer (Recommended):
- Download
CoraleVault-Setup.exefrom releases - Run the installer
- Launch CoraleVault from Start Menu
Portable Version:
- Download
CoraleVault-Portable.zip - Extract anywhere (USB drive, cloud folder, etc.)
- Run
CoraleVault.exe
- Download
CoraleVault.dmgfrom releases - Open the DMG file
- Drag CoraleVault to Applications folder
- Launch from Applications
Debian/Ubuntu (.deb):
sudo dpkg -i coralevault_*.debFedora/RHEL (.rpm):
sudo rpm -i coralevault-*.rpmAppImage (Universal):
chmod +x CoraleVault-*.AppImage
./CoraleVault-*.AppImageAll releases are cryptographically signed with GPG.
Quick Verification:
# Import the public key
gpg --import GPG-PUBLIC-KEY-CORALEVAULT.asc
# Verify a download
gpg --verify CoraleVault-Setup.exe.asc CoraleVault-Setup.exeExpected Output:
gpg: Good signature from "CoraleSoft (CoraleVault Official Releases) <releases@coralesoft.nz>"
GPG Key Fingerprint:
844D CFC4 4A5D E9C1 4C3A 2F62 497A 4CFB B700 543E
- Launch CoraleVault
- Create New Vault
- Choose a strong master password (12+ characters)
- Write it down! There's no password recovery
- Add Your First Password
- Click "Add Entry"
- Fill in website, username, password
- Save
- Lock Your Vault when done (
Ctrl+L/Cmd+L)
Choose a Strong Master Password:
- ✅ 12+ characters minimum
- ✅ Mix of letters, numbers, symbols
- ✅ Memorable but not obvious
- ✅ Not used anywhere else
Examples of strong passwords:
MyDog&2Cats!Love2025correct-horse-battery-stapleILived@123MainSt_Until1995!
Back Up Your Vault:
- Your vault is stored as a
.vaultfile - Copy it to USB drive, external hard drive, or cloud storage
- The file is encrypted, so cloud storage is safe
- User Manual - Complete usage guide
- Security Policy - Security features and vulnerability reporting
- Changelog - Version history and release notes
- ✅ Desktop password manager
- ✅ Local encryption
- ✅ Import from Chrome, Bitwarden
- ✅ Cross-platform (Windows, macOS, Linux)
- 🚧 Self-hosted sync server (open source)
- 🚧 Desktop sync support
- 🚧 Conflict resolution
- 🔮 Browser extensions (Chrome, Firefox, Safari, Edge)
- 🔮 Auto-fill for websites
- 🔮 Cloud-hosted sync service (optional, subscription)
- 🔮 Mobile apps (iOS, Android)
- 🔮 Biometric unlock
- 🔮 Hardware key support (YubiKey)
- 🔮 Vault sharing (families, teams)
| Feature | CoraleVault | Cloud Managers |
|---|---|---|
| Price | Free forever | $3-10/month |
| Data Location | Your computer | Their cloud |
| Open Source | ✅ Yes | ❌ No |
| Self-Hosting | ✅ Yes | ❌ No |
| Vendor Lock-in | ❌ None | ✅ Yes |
| Internet Required | ❌ No | ✅ Yes |
| Feature | CoraleVault | Bitwarden |
|---|---|---|
| Price | Free | Free / $10/year |
| Desktop App | ✅ Native C++ | ✅ Electron |
| Performance | ⚡ Fast | ⚡ Good |
| Self-Hosting | Coming Q1 2026 | ✅ Yes |
| Mobile Apps | Coming 2027 | ✅ Yes |
| Browser Extensions | Coming Q2 2026 | ✅ Yes |
Current Focus: Desktop-first, with sync and mobile coming soon
| Feature | CoraleVault | KeePass |
|---|---|---|
| Modern UI | ✅ Clean, native | ❌ Dated |
| Cross-Platform | ✅ Native on all | |
| Active Development | ✅ Since 2020 | ✅ Since 2003 |
| Sync Built-in | Coming Q1 2026 | ❌ Manual |
| Browser Integration | Coming Q2 2026 |
Both are excellent! Choose CoraleVault for modern UX, KeePass for mature ecosystem.
- Documentation: Start with User Manual
- Issues: Report bugs or request features
- Discussions: Ask questions
- Security: Report vulnerabilities privately
- Email: releases@coralesoft.nz
- Website: coralevault.com
- GitHub: github.com/Coralesoft/CoraleVault
CoraleVault is open source and welcomes contributions!
Ways to contribute:
- 🐛 Report bugs
- 💡 Suggest features
- 🔍 Security audits
- 📝 Improve documentation
- 💻 Submit pull requests
- 🌍 Translations
GNU General Public License v3.0 - See LICENSE for details.
What this means:
- ✅ Free to use, modify, and distribute
- ✅ Modifications must remain open source
- ✅ No warranty (use at your own risk)
- ✅ Commercial use allowed
For commercial licensing inquiries: releases@coralesoft.nz
CoraleVault is built with:
Special thanks to the open source community for making secure, private software possible.
If you find CoraleVault useful, please star the repository! ⭐
It helps others discover the project and motivates continued development.
Copyright © 2020 - 2025 Coralesoft
Download • Documentation • Security • Website