Cipherly — Encrypted Vaul

Cipherly is a privacy-first Chrome extension that puts you back in control of your browser. One master password unlocks an encrypted bookmark vault, a family-grade content filter, a focus timer, an activity tracker, and a browser lockdown — all running 100% locally on your device.

═══ FEATURES ═══

🔐 ENCRYPTED VAULT
• AES-256-GCM encryption with PBKDF2 (600,000 iterations, OWASP standard)
• Folder hierarchy with drag-and-drop import
• Import Chrome bookmarks selectively (tree view with checkboxes — pick only what you want)
• Search across titles, URLs, tags, notes
• Encrypted JSON export — restore on any device that knows your master password

🛡️ CONTENT FILTER (~74,000 curated domains)
• 64,000+ adult sites
• 4,400+ gambling sites
• 3,100+ social media sites
• 2,200+ fake news / misinformation sites
• Custom domain blocklist
• Custom keyword scanner — blocks pages containing your terms
• TLD heuristics (.xxx .porn etc.)
• Force safe-search on Google, Bing, DuckDuckGo, YouTube
• Source: StevenBlack/hosts (MIT license, bundled — no remote fetch)

🚪 SITE LOCKER
• Lock specific sites behind a PIN: youtube.com, instagram.com, etc.
• Domain / URL / glob / regex patterns
• Per-host bypass after unlock (15 min)
• Right-click any page → "Lock with Cipherly"

⏱️ TIME LIMITS & SCHEDULE
• Daily time budget per site (YouTube 1 hour, then locked until midnight)
• Scheduled blocks: block work tabs after 6pm, weekends, etc.
• Per-day reset at local midnight

🎯 FOCUS / POMODORO
• 25-min focus + 5-min break (configurable)
• Distraction blocker — sites you list are blocked during focus only
• Browser notifications for cycle transitions

📊 ACTIVITY TRACKER (opt-in, encrypted)
• Per-site breakdown of every visit, click, scroll depth, form submission
• Hourly histogram — when are you most active?
• Date navigation, search, type filter
• Excluded domains list (banking, email never tracked)
• Encrypted with master password — no one sees your history, including us
• Export as JSON

🚨 PANIC BUTTON
• Ctrl+Shift+P closes all tabs, clears history, opens decoy URL, locks Cipherly
• Configurable retention window
• Optional cookie wipe

🔒 BROWSER LOCKDOWN
• When enabled, every Chrome tab is locked at startup until you enter the master password
• Even chrome://extensions is redirected — cannot be bypassed casually
• Ctrl+Shift+S opens Cipherly anytime

🌍 20 LANGUAGES (full UI)
English, Türkçe, Español, Français, Deutsch, Italiano, Português (Brasil), Русский, العربية, 中文, 日本語, 한국어, हिन्दी, Indonesia, Nederlands, Polski, Tiếng Việt, فارسی, ไทย, Українська

═══ PRIVACY GUARANTEES ═══

✅ Zero telemetry — no analytics, no crash reporting, nothing
✅ Zero cloud — everything in chrome.storage.local
✅ Zero account — no email, no signup, no ID
✅ Zero remote fetches — bundled blocklists, no DNS leaks
✅ Open architecture — inspect every byte stored in Settings → Backup
✅ Free forever — no subscription, no ads

═══ SECURITY ═══

• AES-256-GCM authenticated encryption (built into the browser via Web Crypto API)
• PBKDF2 key derivation, 600,000 iterations (OWASP 2023 recommendation)
• 5-attempt lockout with exponential back-off (1m → 30m)
• Audit log of authentication events (kept locally)
• Re-auth required for sensitive actions (export, reset)
• Tamper detection via heartbeat — warns if extension was disabled
• No eval, no remote code, no dynamic script injection

═══ KEYBOARD SHORTCUTS ═══

• Ctrl+Shift+S — Open Cipherly panel
• Ctrl+Shift+P — Panic button
• Ctrl+Shift+L — Lock immediately

═══ WHO IS THIS FOR ═══

• Parents wanting one tool for content filter + time limits + activity overview
• Privacy enthusiasts who don't trust cloud password managers
• Focus-driven workers who want distraction blocking + pomodoro
• Anyone tired of dozens of single-purpose extensions

═══ NOT THIS ═══

• Not a VPN
• Not a system-level parental control (those need OS-level access)
• Not an antivirus
• Not connected to any online service

Built for people who value privacy. Free, open architecture, local-first.