The Cinder Project
HomeProjectsDiscordDonate

CoalBox

Local-first, open-format password manager.

Overview

CoalBox is a password manager that runs entirely on your local machine. It stores your credentials in a single encrypted .emberkeys file that you control. No cloud service, no subscription, no vendor lock-in.

Your vault lives on your machine. No account, no server, no internet required. The .emberkeys format is fully documented and open — you are never locked in.

Builds from source, installs to /usr/local/bin. No leftover dependencies. How to install: Documentation

Key Features

Vault Management

AES-256-GCM encryption with Argon2id key derivation. Auto-lock after configurable inactivity.

Entry Types

Login, Authenticator, Secure Note, Payment Card, and Identity entries with custom fields.

Password Generator

Character mode and passphrase mode with EFF large wordlist (7776 words).

Import / Export

Import from CSV, Bitwarden JSON, KeePass XML, 1Password 1PUX. Export to plaintext JSON.

TOTP & Breach Checking

TOTP code generation (RFC 6238) and HaveIBeenPwned breach checking via k-anonymity.

WebUI

Redesigned localhost web interface with Tailwind CSS and Lucide icons. Full vault management in the browser.

Current Status

Active Development

CoalBox is currently in active development. Core vault management, CLI, import/export, and WebUI are functional. The project is stabilizing for a wider release.

Recent Updates