b2KIT

Encryption Key Manager (Local)

Store and organize encryption keys locally with labels, expiry dates, and key type metadata. All data in IndexedDB.

Tested tool guide Tested browser tools Checked August 16, 2026

What Encryption Key Manager (Local) does and how it behaves

Build a local catalog of encryption keys by saving each key with a label, an expiry date, and key-type metadata in the browser's IndexedDB storage. This is an organizer, so its useful result is a set of identifiable records rather than ciphertext, a derived key, or a cryptographic validity decision. The easy mistake is to read "local" as "automatically encrypted": local storage describes where the records stay, not whether the saved key material has an additional vault-encryption layer.

How the result is produced

1

Record storage

A saved item combines the key material with the label, expiry date, and key type supplied for that record. The manager writes that record to IndexedDB for this site's origin, allowing it to remain available across ordinary visits in the same browser profile. The documented purpose is record keeping; saving an entry is not evidence that its contents are cryptographically valid or match the declared type.

2

Metadata interpretation

Labels distinguish keys that may otherwise look alike, while the expiry field records the date chosen by the user. These fields describe the catalog entry; they do not establish cryptographic validity, ownership, revocation status, or safe use. An expiry date should be treated as management information unless the interface explicitly indicates that an action is blocked or a record is removed.

Good uses

  • Keep development, testing, and production key records distinguishable with explicit labels and key-type metadata.
  • Record planned expiry dates so locally held keys can be reviewed before a scheduled rotation.
  • Maintain a browser-local inventory on a device where key material must not be uploaded to a remote service.

Limits and checks

  • IndexedDB is not a backup. Clearing site data, deleting the browser profile, or losing the device may remove the stored records.
  • A label and selected key type describe the record but do not by themselves confirm the key's syntax, strength, origin, or intended use.
  • Records belong to this site's storage in a particular browser environment; another browser, profile, or device will not automatically show the same inventory.

Common questions

Does my key material leave the browser?

No. The stated storage location is IndexedDB in the current browser, so creating and consulting records does not require sending key material to a server. That does not make the data immune to local access or loss: anyone or anything with suitable access to the same browser profile and site origin may present a risk.

Does the manager protect every stored key with a master password?

Do not assume it does. The description establishes local IndexedDB storage, but it does not establish a master password, a separate wrapping key, or application-level encryption of stored records. Device or browser protections may exist outside this tool, but they are not a substitute for a documented vault feature when the stored material is sensitive.

References and verification

The behavioral notes were checked against the browser implementation. Standards and primary references below define the relevant format, formula, or platform behavior.

Related Tools