Locksy - Tab Locker & Password Protection door Vansh Sethi

Locksy provides military-grade tab protection with PBKDF2 encryption (600,000 iterations), keeping your sensitive information secure with zero online tracking. All data stays locally on your device for complete privacy.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

❓ WHY USE LOCKSY?

Ever stepped away from your computer and worried about someone accessing your open tabs? Or work in a shared environment where sensitive information could be compromised? Locksy solves these real-world problems:

✅ COMMON SCENARIOS:
• You're at a coffee shop and need to step away - lock your banking tabs instantly
• Working from a shared computer at work or library - protect your personal accounts
• Family members use the same computer - keep your private browsing secure
• Presenting your screen in meetings - prevent accidental exposure of sensitive tabs
• Managing multiple accounts - add extra security layer to important sessions
• Browser stays open 24/7 - protect tabs even when you're away

🎯 THE PROBLEM:
Simply closing tabs isn't always practical when you have multiple sessions, complex workflows, or need to maintain your browsing state. Browser passwords don't protect already-open tabs, and Windows/Mac lock screens don't prevent someone with access from viewing your browser content.

💡 THE SOLUTION:
Locksy adds a password-protected lock screen to individual tabs or entire domains. Even if someone accesses your browser, they'll need your password to view locked content. It's like having a safe for your most sensitive browser tabs.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

🔒 CORE FEATURES:
• Instant Tab Locking - Lock any tab with one click or keyboard shortcut (Alt+Shift+9)
• Domain-Based Auto-Lock - Automatically lock specific websites (banking, email, social media)
• Bulk Lock Operations - Lock all tabs at once with Alt+Shift+8
• Visual Indicators - Lock icons on tabs and badge counter show protection status at a glance
• Smart Session Recovery - Locked tabs persist across browser restarts and system crashes
• Cross-Window Support - Works seamlessly across multiple browser windows

⌨️ KEYBOARD SHORTCUTS (Pre-configured & Customizable):
• Alt+Shift+9 - Lock current tab instantly
• Alt+Shift+0 - Open Domain Lock Manager
• Alt+Shift+8 - Lock all tabs in current window
All shortcuts work out-of-the-box and can be fully customized to your preferences.

🔐 ENTERPRISE-GRADE SECURITY (NEW in v2.1.0):
• PBKDF2 Key Derivation with 600,000 iterations (OWASP 2023 compliant)
• Centralized rate limiting to prevent bypass attacks via multiple popups/tabs
• Advanced brute-force protection with exponential backoff rate limiting
• Timing attack protection with constant-time password comparison
• 5-minute lockout after 10 failed authentication attempts
• Live countdown timers during rate limiting
• Password strength indicator with real-time feedback
• Zero data collection or analytics
• No external servers - everything stays on your device
• Open-source and transparent security implementation
• 120 years crack resistance (vs 7 days with legacy encryption)

🛡️ ADVANCED PROTECTION:
• Rate limiting prevents brute-force attacks
• Exponential backoff delays (2s, 4s, 8s... up to 64s)
• Automatic lockout mechanism for suspicious activity
• Progressive warning messages before account lockout
• Secure password clearing during rate limit periods
• Defense-in-depth security architecture

🎯 PERFECT FOR:
• Protecting financial and banking websites
• Securing work-related sensitive information
• Maintaining privacy in shared or public environments
• Preventing unauthorized access to personal accounts
• Managing multiple secure sessions simultaneously
• Users who require OWASP-compliant security standards

💡 SMART FEATURES:
• Real-time locked tab counter badge on extension icon
• Lock icon overlays on protected tab favicons
• Domain whitelist management for auto-locking
• Session persistence across crashes and updates
• Intuitive interface with modern design
• Instant notifications for all lock/unlock actions
• Scope selection for domain unlocks (this tab only or all domain tabs)
• Remember unlock preferences for frequently accessed domains

🌐 COMPATIBILITY:
Fully compatible with Firefox 109 and above. Works flawlessly across all operating systems including Windows, macOS, and Linux. Optimized specifically for Firefox's security policies.

🔓 PRIVACY FIRST:
Locksy is built with privacy at its core. No data leaves your device, no telemetry, no tracking, and no external connections. Your passwords and locked tabs are stored only in your local browser storage using industry-standard PBKDF2 encryption with unique salts.

🆓 FREE & OPEN SOURCE:
Available on GitHub under MIT license. Community-driven development with regular updates and responsive support.

Perfect for users who value security and privacy without compromising on convenience!

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

🆕 VERSION 2.1.0 - ENHANCED SECURITY & TRANSPARENCY (LATEST!)

🔐 ENHANCED SECURITY:
• Centralized Rate Limiting - Prevents bypass via multiple popups/tabs
• Single shared rate limit state across entire extension
• More robust against circumvention attempts
• All password entry points now use centralized verification

✨ WHAT'S NEW OVERLAY:
• Beautiful update notifications after extension updates
• Shows version changes and key feature highlights
• Direct links to full changelog
• Smooth animations and dismissible interface

🔍 TRUST & TRANSPARENCY:
• Verification guides for users to confirm extension integrity
• Three methods to verify: releases, build from source, inspect installation
• Network activity monitoring instructions
• Offline functionality test procedures
• Complete source code comparison guides

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

🆕 VERSION 2.0.0 - MAJOR SECURITY OVERHAUL

🔐 ENTERPRISE-GRADE CRYPTOGRAPHY:
• PBKDF2 Key Derivation - 600,000 iterations (OWASP 2023 standard)
• Replaces fast SHA-256 with slow, brute-force resistant KDF
• ~120 years to crack vs ~7 days with old implementation
• 256-bit keys with unique 128-bit salts
• Fully backward compatible with existing passwords

🚫 ADVANCED BRUTE-FORCE PROTECTION:
• Intelligent rate limiting with 3 free attempts
• Exponential backoff delays (2s, 4s, 8s, 16s, 32s, 64s)
• 5-minute lockout after 10 failed attempts
• Live countdown timers showing exact wait times
• Progressive warnings before lockouts
• Auto-recovery on successful authentication

⚡ TIMING ATTACK PROTECTION:
• Constant-time string comparison
• Prevents information leakage through timing analysis
• Applied to all verification paths

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

📌 IMPORTANT LINKS:

🌐 Official Website : https://locksy.dev

📺 Video Demo: https://www.youtube.com/watch?v=6uyd4sN5WiA

📖 Privacy Policy: https://github.com/vansh-121/Locksy/blob/main/docs/PRIVACY.md

🐛 Report Issues or Request Features: https://github.com/vansh-121/Locksy/issues

💬 Support & Contact:
For support, bug reports, or feature requests, please visit our GitHub repository or mail at vansh.sethi98760@gmail.com.

📜 License:
MIT License - https://github.com/vansh-121/Locksy/blob/main/LICENSE

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

🔄 RECENT UPDATES:

v2.0.0 (December 2025) - Major Security Overhaul: PBKDF2 encryption, rate limiting, timing attack protection
v1.0.8 (December 2025) - Bug fixes and performance improvements
v1.0.7 (December 2025) - Keyboard shortcuts and visual indicators
v1.0.6 (November 2025) - Domain-based auto-lock feature

For complete changelog, visit: https://github.com/vansh-121/Locksy/blob/main/docs/CHANGELOG.md

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

Thank you for choosing Locksy! 🔒✨