Organize and search
Add, edit, categorize, search, and filter credentials without relying on scattered files or manual records.
Enterprise credential protection
Every credential. One secure vault.
CredentialVault is a secure Windows desktop system for storing, organizing, auditing, and protecting organizational passwords, accounts, licences, and sensitive access information.
AES-256-GCM encryption
Role-based permissions
Complete audit history
Encryption active
Audit event recorded
Secure credentials
Centralized organizational access
Management Email
management@company.local
Protected
Production Server
administrator ••••••••••
Protected
Customer Database
db_admin ••••••••••
Protected
Vault security level
Strong
Encrypted storage
Passwords and sensitive notes
Controlled access
Administrator, auditor and viewer
Audit visibility
Traceable security activity
Encrypted backups
Backup and restoration support
Why CredentialVault
Replace scattered records with one protected system.
CredentialVault replaces spreadsheets, notebooks, text files, and unsecured documents with a centralized application designed for controlled organizational access.
Centralize every credential type
Manage employee emails, websites, servers, databases, domains, routers, Wi-Fi, cloud services, and licences.
Preserve organizational knowledge
Keep current and historical credentials accessible to approved users—even when employees or responsibilities change.
Make sensitive actions accountable
Track password reveals, updates, backups, user management, exports, and authentication events.
Core capabilities
Everything required to manage access securely.
Built around secure credential operations, controlled visibility, historical accountability, and dependable recovery.
Generate strong passwords
Produce cryptographically secure passwords for new accounts and sensitive credential rotations.
Permission-based reveal
Reveal stored passwords only when the authenticated user’s assigned role permits sensitive access.
Password history
Preserve previous encrypted passwords automatically whenever an authorized user updates a credential.
Detailed audit logs
Record who performed an action, when it occurred, and the reason supplied for sensitive credential changes.
User and role management
Assign administrator, auditor, and viewer roles according to each person’s operational responsibilities.
Backup and restoration
Back up the encrypted SQLite database and restore the system when recovery is required.
Non-sensitive reports
Export useful CSV reports while excluding passwords and other protected secret values.
Automatic session lock
Lock the application automatically after ten minutes of inactivity to reduce unattended-access risk.
Security architecture
Layered protection from login to storage.
CredentialVault combines established cryptographic methods, parameterized database operations, access controls, and event tracking within a local Windows desktop application.
CORE / 01
Python
Primary application language used for business logic, security workflows, and database operations.
UI / 02
PySide6
Native Windows desktop graphical interface for credential, account, user, and audit management.
DATA / 03
SQLite
Local structured storage for users, credentials, categories, password history, and audit records.
ENCRYPT / 04
AES-256-GCM
Authenticated encryption for credential passwords and sensitive notes before database storage.
HASH / 05
Argon2id
Secure password hashing for protecting CredentialVault users’ application login passwords.
KEY / 06
Scrypt
Password-based key derivation used to generate encryption keys for protected credential data.
ACCESS / 07
RBAC
Role-based access control separates administrator, auditor, and viewer capabilities.
DATABASE / 08
Parameterized SQL
Bound query parameters help reduce SQL injection risk during local database operations.
01
User authentication
Argon2id verification
02
Key derivation
Scrypt processing
03
Data encryption
AES-256-GCM
04
Local storage
Encrypted SQLite data
Role-based access
Give every user exactly the access they need.
Defined responsibilities help prevent unnecessary access to passwords, account management, and sensitive system operations.
Administrator
Full operational control over credentials, users, backups, restoration, configuration, and access permissions.
Auditor
Focused access to event history and operational records for oversight, review, and accountability.
Viewer
Restricted read-only access to approved credential records without administrative or destructive capabilities.
Accountability by design
Every sensitive action leaves a trace.
Audit logging provides a chronological record of security-relevant activity across authentication, credential access, password changes, user management, backups, and reporting.
01
Identity
Records the authenticated user responsible for an action.
02
Timestamp
Stores when the security event occurred.
03
Reason and context
Preserves the supplied reason for sensitive password updates.
credentialvault://audit-log
Live
09:14:02
User admin authenticated successfully
Success
09:16:37
Credential Production Server revealed
Sensitive
09:20:11
Password updated for Customer Database
Changed
09:20:12
Previous password stored in encrypted history
Protected
09:24:45
Encrypted database backup created
Backup
09:31:08
Non-sensitive CSV report exported
Export
Protect access. Preserve history. Maintain control.
CredentialVault brings credential storage, secure password handling, user permissions, activity logging, encrypted backups, and recovery into one organized Windows desktop system.