Your Net Worth & Subscriptions.
100% Local. 0% Server.
Stop linking your bank accounts to invasive third-party servers. LocalVault is a premium financial dashboard that keeps your sensitive wealth data encrypted exactly where it belongs: inside your own browser.
Every record is sealed with AES-256-GCM, using a key derived from your master password via PBKDF2-SHA256 (600,000 rounds) and the browser’s built-in Web Crypto API, then stored only in your device’s IndexedDB — no bank links, no sync servers, no database to breach.
Data is currently being read/written directly to your browser's IndexedDB. Zero bytes have left your machine.
Where Does Your Financial Data Actually Live?
- Forces connection via Plaid to actual bank credentials
- Financial transactions stored on centralized cloud servers
- Subject to corporate privacy policy changes and leaks
- Sells aggregated financial data to advertisers
- Zero Bank Linkage: 100% manual entry with ultra-fast UX
- Zero Server Storage: Everything stays in your browser's IndexedDB
- AES-GCM Encryption: Local master password protection
- Self-Custody Cloud: Sync only to your own Google Drive/GitHub Gist
How Does 100% Local Encryption Work?
Designed for cryptographic rigor without sacrificing the fluid, high-velocity UX of Tier-1 web desktop software.
Zero-Server Wealth Dashboard
Complete wealth distribution visualized locally with instant sub-millisecond calculation updates.
Subscription Burn Tracking
Recurring costs tallied into a live monthly burn rate with renewal days on record — no bank integrations, no card logs, no cloud.
Browser-Level Encryption
Hardware-accelerated Web Crypto API isolates records behind unextractable master keys.
Privacy Guarantee
Every architectural decision in LocalVault subordinates convenience to one outcome: your financial life stays yours alone.
Zero Data Egress
ZERO EGRESSGoogle sign-in verifies your identity and nothing more. Your vault never syncs to a server — not a single byte of asset data leaves your machine.
Military-Grade Encryption
AES-256-GCMThe Web Crypto API encrypts every record with AES-256-GCM using a key derived from your master password. IndexedDB only ever stores ciphertext.
You Own the Keys
CLIENT-ONLYYour master password is never stored and cannot be recovered. The derived key exists only in memory during an unlocked session.
Verifiable by Design
AUDITABLEDon't take our word for it. Open DevTools → Application → IndexedDB and read the ciphertext yourself — your data lives on your disk, and nowhere else.
Simulate Local Record Creation
Test real IndexedDB storage pipeline in your browser without transmitting any payload.
Frequently Asked Questions
Straight answers about living without a backend — no marketing hedging.
Will clearing my browser data wipe my asset records?+
Yes. Everything lives in your browser's IndexedDB, so clearing site data deletes the vault. Use the Export button regularly to keep an encrypted backup file.
What happens if I forget my master password?+
It cannot be recovered — that is the point of local-only encryption. Your only option is to reset the vault and re-import from a backup that you can still unlock.
Which browsers and devices are supported?+
Any modern browser with IndexedDB and Web Crypto (Chrome, Edge, Firefox, Safari). Because there is no server, data does not sync across devices — each browser profile is its own isolated vault.
How do I migrate to a new computer?+
Export an encrypted vault file on the old machine, then Import it on the new one. The file stays AES-GCM encrypted; the password travels in your head, not the file.
Why does LocalVault use Google sign-in?+
Google One Tap sign-in exists purely as an access gate: Google verifies who you are, and that is the entire relationship. Google never receives vault data, account balances, or subscription records, and LocalVault stores no financial data on any server — sign-in only decides whether the door opens. The real key holder is you: your master password is the only way to derive the AES-256-GCM key that decrypts your vault, and it never leaves your head or your device. If you forget it, no one — not Google, not LocalVault — can recover your data. Identity is delegated for convenience; custody of data is never delegated at all.
Is my financial data really never uploaded?+
Correct. LocalVault performs every step of encryption and storage inside your browser: your master password derives an AES-256-GCM key locally via PBKDF2-SHA256 (600,000 rounds), the vault is sealed with the browser's built-in Web Crypto API, and the encrypted blob is written only to your device's IndexedDB. Google sign-in verifies who you are and nothing more — no vault data, balances, or subscription records are ever transmitted to Google or to any LocalVault server, because there is no LocalVault data server. You can verify this yourself: open DevTools → Network while using the app, and after sign-in you will see zero API calls carrying your data. There is nothing to breach, because nothing is stored server-side. Read how AES-GCM encryption works in your browser.
What happens to my data if LocalVault shuts down?+
Nothing stored on your device is lost. Your vault lives in your browser's IndexedDB, not on LocalVault servers, and the Export button produces an encrypted backup file that remains yours — standard AES-256-GCM ciphertext that only your master password can unlock, readable by any future implementation of the same scheme. Keep regular exports and your data survives the app, the company, or the domain. Read why your net worth data should never touch a server.
Pricing
Everything local, everything encrypted — with starter limits.
- ▸5 asset accounts
- ▸5 subscription items
- ▸AES-GCM local encryption
- ▸Google one-tap sign-in
Unlimited tracking. Same zero-upload privacy.
- ▸Unlimited assets & subscriptions
- ▸Everything in Free
- ▸All future Pro features
Claim Sovereignty Over Your Wealth Records
Free tier for life. Pro from $29/yr (≈ $2.4/mo). No cloud databases to hack. Run entirely in your browser memory.