AliasVault, created by lanedirt, is a privacy-first identity and password manager that blocks cross-site tracking and profiling. The extension and self-hosted platform combine per-site alias generation with password storage and a built-in email server, letting users create unique credentials and receive messages inside an encrypted vault. The app targets privacy-conscious individuals and self-hosting enthusiasts who want local control over identities and prefer auditable, open-source software.

How the app isolates identities to limit tracking

The app generates a distinct identity for each service, pairing randomized passwords with unique email aliases and separate credentials. This per-site isolation reduces linkability between accounts because aliases and passwords are not reused. Browser integration on Firefox supplies autofill and one-click alias creation from the extension, while the vault can receive messages through its built-in email server so aliases work without third-party forwarding.

How private and secure are your vault contents?

The tool implements a zero-knowledge design, keeping the master password local so encrypted data is inaccessible to third parties. End-to-end encryption uses Argon2Id for key derivation and AES-256-GCM for storage encryption, and the codebase is published under AGPLv3 on GitHub for public audit. The developer publishes the project as open source, allowing independent review of cryptographic choices and storage behavior.

Who benefits from self-hosting and cross-device availability

The app works as a browser extension and as a self-hosted web application, and builds Docker images for deployment on Linux VMs, Raspberry Pi devices, home servers, or VPS instances. It also lists ports for other browsers and mobile platforms, so people who run personal servers can keep identity data under their control while accessing aliases and passwords across desktop and mobile devices.

A practical choice for privacy-focused self-hosters

AliasVault suits privacy-conscious users and self-hosting enthusiasts who accept a hands-on setup and maintenance model. Users seeking plug-and-play simplicity may find the installation and server upkeep demanding. For those prepared to run their own instance and manage domains, the app delivers a transparent, auditable foundation for reducing cross-site profiling and maintaining direct control over identity data.