Locksy - Tab Locker & Password Protection troch Vansh Sethi

Locksy provides military-grade tab protection with PBKDF2 encryption (600,000 iterations), keeping your sensitive information secure with zero online tracking. All data stays locally on your device for complete privacy.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

❓ WHY USE LOCKSY?

Ever stepped away from your computer and worried about someone accessing your open tabs? Or work in a shared environment where sensitive information could be compromised? Locksy solves these real-world problems:

✅ COMMON SCENARIOS:
• You're at a coffee shop and need to step away - lock your banking tabs instantly
• Working from a shared computer at work or library - protect your personal accounts
• Family members use the same computer - keep your private browsing secure
• Presenting your screen in meetings - prevent accidental exposure of sensitive tabs
• Managing multiple accounts - add extra security layer to important sessions
• Browser stays open 24/7 - protect tabs even when you're away
• Auto-lock after inactivity - never worry about forgetting to lock
• Schedule-based protection - automatic locking during specific hours
• Unlock tabs with your fingerprint or face - no password typing required

🎯 THE PROBLEM:
Simply closing tabs isn't always practical when you have multiple sessions, complex workflows, or need to maintain your browsing state. Browser passwords don't protect already-open tabs, and Windows/Mac lock screens don't prevent someone with access from viewing your browser content.

💡 THE SOLUTION:
Locksy adds a password-protected lock screen to individual tabs or entire domains. Even if someone accesses your browser, they'll need your password (or biometric) to view locked content. It's like having a safe for your most sensitive browser tabs.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

🔒 CORE FEATURES:
• Instant Tab Locking - Lock any tab with one click or keyboard shortcut (Alt+Shift+9)
• Domain-Based Auto-Lock - Automatically lock specific websites (banking, email, social media)
• Bulk Lock Operations - Lock all tabs at once with Alt+Shift+8
• Auto-Lock Timer - Automatic locking after inactivity periods
• Scheduled Locking - Time-based automatic protection during specific hours
• Biometric Unlock - Unlock tabs with fingerprint, Face ID, or Windows Hello (NEW v2.3.0)
• Visual Indicators - Lock icons on tabs and badge counter show protection status at a glance
• Smart Session Recovery - Locked tabs persist across browser restarts and system crashes
• Cross-Window Support - Works seamlessly across multiple browser windows

🔑 BIOMETRIC AUTHENTICATION (NEW v2.3.0):
• Unlock protected tabs with fingerprint, Face ID, or Windows Hello
• Powered by FIDO2 / WebAuthn — the same standard used by banking apps
• One-tap unlock on the locked tab screen — no typing required
• Works with: Windows Hello (PIN/Face/Fingerprint), Touch ID, Face ID, fingerprint readers
• Graceful fallback to master password if biometric is unavailable or fails
• Retry option with clear status messaging
• Enable or disable biometric at any time from extension settings
• "Use as Default" toggle — choose whether biometric or password shows first
• Zero biometric data stored — only a public-key credential ID saved locally
• Credential stays on your device inside the OS security chip (TPM / Secure Enclave)
• Works entirely offline — no server, no cloud, no data transmitted

📬 NEWSLETTER SUBSCRIPTION (NEW v2.3.0):
• Subscribe to Locksy updates directly from the popup
• Single-click button — no forms, no friction

⏱️ AUTO-LOCK TIMER:
• Automatic locking after inactivity periods
• Quick presets: 5, 15, 30, 60 minutes
• Custom duration: 1-480 minutes (up to 8 hours)
• Smart activity detection: clicks, keyboard, scrolling, video playback
• Timer resets on any user interaction
• Desktop notifications when activated
• Lock all tabs or active tab only

📅 SCHEDULED LOCKING:
• Time-based automatic locking during specific hours
• Custom start/end time (24-hour format)
• Day selection: individual days, weekdays, weekends, all days
• Quick presets: Work Hours (9 AM-5 PM), Night Time (10 PM-6 AM), All Day
• Automatic locking when entering scheduled period
• Only schedule-locked tabs auto-unlock when period ends
• Manual locks remain locked regardless of schedule
• Supports overnight schedules (e.g., 10 PM - 6 AM)
• Persistent using Alarms API - survives browser restarts

🎬 SMART ACTIVITY DETECTION:
• Monitors: mouse clicks, keyboard input, scrolling, touch events, video playback
• Throttled reporting (maximum once per 10 seconds)
• Passive event listeners for zero performance impact
• Prevents unwanted auto-locks during active browser use

⌨️ KEYBOARD SHORTCUTS (Pre-configured & Customizable):
• Alt+Shift+9 - Lock current tab instantly
• Alt+Shift+0 - Open Domain Lock Manager
• Alt+Shift+8 - Lock all tabs in current window
All shortcuts work out-of-the-box and can be fully customized to your preferences.

🔐 ENTERPRISE-GRADE SECURITY:
• PBKDF2 Key Derivation with 600,000 iterations (OWASP 2023 compliant)
• Centralized rate limiting to prevent bypass attacks via multiple popups/tabs
• Advanced brute-force protection with exponential backoff rate limiting
• Timing attack protection with constant-time password comparison
• 5-minute lockout after 10 failed authentication attempts
• Live countdown timers during rate limiting
• Password strength indicator with real-time feedback
• Zero data collection or analytics
• No external servers - everything stays on your device
• Open-source and transparent security implementation
• 120 years crack resistance (vs 7 days with legacy encryption)

🛡️ ADVANCED PROTECTION:
• Rate limiting prevents brute-force attacks
• Exponential backoff delays (2s, 4s, 8s... up to 64s)
• Automatic lockout mechanism for suspicious activity
• Progressive warning messages before account lockout
• Defense-in-depth security architecture
• Separate tracking for manual, auto-lock, and scheduled locks

🎨 RESPONSIVE DESIGN (NEW v2.3.0):
• Lock screen fully adapts to all screen sizes and DPI levels
• Improved popup and domain manager layout on narrow viewports
• New biometric UI states: spinner, status badges, retry button
• Modern authentication screen with clean biometric / password flow separation

🎯 PERFECT FOR:
• Protecting financial and banking websites
• Securing work-related sensitive information
• Maintaining privacy in shared or public environments
• Preventing unauthorized access to personal accounts
• Managing multiple secure sessions simultaneously
• Users who require OWASP-compliant security standards
• Scheduled workers who need automatic protection during specific hours
• Night security - auto-lock during sleep hours
• Forgetful users - never worry about leaving tabs unlocked
• Users who want password-free biometric unlocking

💡 SMART FEATURES:
• Real-time locked tab counter badge on extension icon
• Lock icon overlays on protected tab favicons
• Domain whitelist management for auto-locking
• Session persistence across crashes and updates
• Intuitive interface with modern gradient design
• Collapsible sections for organized layout
• Animated toggle switches
• Quick preset buttons for common durations and schedules
• Instant notifications for all lock/unlock actions
• Scope selection for domain unlocks (this tab only or all domain tabs)

🌐 COMPATIBILITY:
Fully compatible with Firefox 109 and above. Works flawlessly across all operating systems including Windows, macOS, and Linux. Optimized specifically for Firefox's security policies.

🔓 PRIVACY FIRST:
Locksy is built with privacy at its core. No data leaves your device, no telemetry, no tracking, and no external connections. Your passwords and locked tabs are stored only in your local browser storage using industry-standard PBKDF2 encryption with unique salts. Biometric credentials are never stored — only a public-key reference ID stays on your device.

🆓 FREE & OPEN SOURCE:
Available on GitHub under MIT license. Community-driven development with regular updates and responsive support.

Perfect for users who value security and privacy without compromising on convenience!

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

🆕 VERSION 2.3.0 - BIOMETRIC AUTHENTICATION (LATEST)

🔑 BIOMETRIC AUTHENTICATION:
• Unlock protected tabs with fingerprint, Face ID, or Windows Hello
• Powered by FIDO2 / WebAuthn — the same standard used by banks
• One-tap unlock — no password typing required
• Compatible: Windows Hello, Touch ID, Face ID, fingerprint readers
• Graceful fallback to master password if biometric unavailable
• Enable/disable biometric at any time from settings
• "Use as Default" toggle — set biometric or password as primary unlock
• Zero biometric data stored — public-key credential only, stays on device
• Retry option with clear status messaging on failure

🔒 PRIVACY-FIRST BIOMETRIC:
• No biometric data ever stored, transmitted, or leaves the OS
• Uses platform TPM / Secure Enclave — same as device login and banking apps
• Works entirely offline — no server, no cloud

📬 NEWSLETTER SUBSCRIPTION:
• Subscribe to Locksy updates directly from the popup (single click)

🎨 RESPONSIVE DESIGN OVERHAUL:
• Lock screen fully adapts to all screen sizes and DPI levels
• Improved popup and domain manager layout on narrow viewports
• New biometric UI: spinner, status badges, retry button, flow separation

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

🆕 VERSION 2.2.0 - AUTO-LOCK & SCHEDULED LOCKING (JANUARY 2026)

⏱️ AUTO-LOCK TIMER:
• Automatic locking after inactivity periods
• Presets: 5, 15, 30, 60 min + custom (1-480 min)
• Smart activity tracking: clicks, keyboard, scrolling, video playback
• Timer resets on any user interaction
• Desktop notifications on activation
• Lock all tabs or active tab only

📅 SCHEDULED LOCKING:
• Time-based automatic locking during specific hours
• Custom start/end time (24-hour format)
• Day selection: individual days, weekdays, weekends, all days
• Quick presets: Work Hours (9-5), Night Time (10 PM-6 AM), All Day
• Only schedule-locked tabs auto-unlock when period ends
• Manually locked tabs remain locked regardless of schedule
• Supports overnight schedules (e.g., 10 PM - 6 AM)
• Persistent using Alarms API - survives browser restarts

🎬 SMART ACTIVITY DETECTION:
• Monitors: clicks, keyboard, scrolling, touch, video playback
• Throttled reporting (max once per 10 sec)
• Passive listeners for zero performance impact

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

🆕 VERSION 2.0.0 & 2.1.0 - MAJOR SECURITY OVERHAUL

🔐 ENTERPRISE-GRADE CRYPTOGRAPHY:
• PBKDF2 Key Derivation - 600,000 iterations (OWASP 2023 standard)
• Replaces fast SHA-256 with slow, brute-force resistant KDF
• ~120 years to crack vs ~7 days with old implementation
• 256-bit keys with unique 128-bit salts
• Fully backward compatible with existing passwords

🚫 ADVANCED BRUTE-FORCE PROTECTION:
• Intelligent rate limiting with 3 free attempts
• Exponential backoff delays (2s, 4s, 8s, 16s, 32s, 64s)
• 5-minute lockout after 10 failed attempts
• Live countdown timers showing exact wait times
• Progressive warnings before lockouts
• Auto-recovery on successful authentication

⚡ TIMING ATTACK PROTECTION:
• Constant-time string comparison
• Prevents information leakage through timing analysis

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

📌 IMPORTANT LINKS:

🌐 Official Website: https://locksy.dev

📺 Video Demo: https://www.youtube.com/watch?v=6uyd4sN5WiA

📖 Privacy Policy: https://github.com/vansh-121/Locksy/blob/main/docs/PRIVACY.md

🐛 Report Issues or Request Features: https://github.com/vansh-121/Locksy/issues

⭐ GitHub Repository: https://github.com/vansh-121/Locksy

💖 Sponsor This Project: https://github.com/sponsors/vansh-121
Help support Locksy's development and keep it free and open-source!

💬 Support & Contact:
For support, bug reports, or feature requests, please visit our GitHub repository or mail at vansh.sethi98760@gmail.com.

📜 License:
MIT License - https://github.com/vansh-121/Locksy/blob/main/LICENSE

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

🔄 RECENT UPDATES:

v2.3.0 (February 2026) - Biometric Authentication: fingerprint, Face ID, Windows Hello unlock
v2.2.0 (January 2026) - Auto-Lock Timer & Scheduled Locking with Smart Activity Detection
v2.1.0 (January 2026) - Enhanced Security: Centralized Rate Limiting & What's New Overlay
v2.0.0 (December 2025) - Major Security Overhaul: PBKDF2 encryption, rate limiting, timing attack protection
v1.0.8 (December 2025) - Bug fixes and performance improvements
v1.0.7 (December 2025) - Keyboard shortcuts and visual indicators
v1.0.6 (November 2025) - Domain-based auto-lock feature

For complete changelog, visit: https://github.com/vansh-121/Locksy/blob/main/docs/CHANGELOG.md

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

Thank you for choosing Locksy! 🔒✨

Made with ❤️ for Privacy & Security | © 2026 Locksy