Kavach v1.3.0

What's new in v1.3.0

Features

• CSV import -- Import credentials from Chrome, LastPass, and Bitwarden CSV exports. Duplicates are skipped and reported.
• Keyboard shortcuts -- Ctrl+K focuses search, N opens Add Credential, Escape clears search.

Improvements

• Light mode contrast -- All 5 themes now shift to a darker palette in light mode for better readability.
• Theme-aware note icons -- Secure note icons and labels follow the selected theme colour instead of always showing amber.
• Consistent form headers -- Add/Edit Credential and Add/Edit Secure Note screens share the same page header style.
• Frontend tests in Maven build -- mvn clean package now runs Vitest alongside backend tests.

Kavach v1.2.0

What's new

• Credential tags -- label credentials with custom tags and filter by them in the vault
• Password generator presets -- Custom, PIN, Alphanumeric, and Passphrase modes (256-word list, no modulo bias)
• Secure notes -- store encrypted free-text notes alongside passwords
• Favourites -- star credentials, sort them to the top, and filter to starred-only
• Auto-update notification -- a dismissible banner appears in the app when a newer release is available

Installation

Download Kavach-v1.2.0-windows-x64.zip, extract it, and run Kavach.exe.

No installer required. Your existing kavach.db is automatically migrated on first launch.

Kavach v1.1.0

What's new

• Backup to chosen location -- Configure a secondary backup destination in Settings. Kavach copies your database to that folder on every startup.
• Localhost HTTPS -- Kavach now serves on HTTPS using a self-signed certificate generated on first launch. Closes the loopback traffic sniffing gap. On first open your browser will show a one-time certificate warning -- click Advanced then Proceed to localhost to continue.

Installation

1. Download and extract Kavach-v1.1.0-windows-x64.zip anywhere on your machine.
2. Run Kavach.exe inside the extracted folder.
3. No Java required -- Eclipse Temurin 21.0.9 is bundled.

Upgrading from v1.0.0

Replace your existing Kavach/ folder with the new one. Your vault database at %USERPROFILE%\.kavach\kavach.db is untouched.

Kavach v1.0.0

Kavach v1.0.0

First stable release of Kavach, a local-first personal password manager.

Features

• AES-256-GCM encryption with per-credential data encryption keys (DEK)
• TOTP-based password reveal via authenticator app (Google Authenticator, Authy, etc.)
• Master password never stored -- derived key lives in memory only, zeroed on lock/logout
• Auto-lock after 10 minutes of inactivity
• Password health report (weak, reused, old passwords)
• Encrypted vault export and import
• Search by username and URL
• Full audit log of all vault activity
• SMTP-configurable email for OTP notifications

Installation (Windows)

1. Download Kavach-v1.0.0-windows-x64.zip
2. Extract the zip
3. Run Kavach.exe from the extracted folder

No Java installation required -- the JRE is bundled inside the package.
Bundled runtime: Eclipse Temurin 21.0.9 (OpenJDK, free for personal and commercial use).

Notes

• All data is stored locally at %USERPROFILE%\.kavach\kavach.db
• The vault is created once per machine on first launch
• If the master password is forgotten, vault data is unrecoverable