Keywise: fast, portable Firefox credential viewer for local recovery
Reads and decrypts saved logins directly from Firefox profile files (key4.db and logins.json), offering fast credential access without launching the browser. Created by Lucas Kraider as an open-source utility for desktop environments, Keywise embeds PBKDF2 and AES-256-CBC decryption and ships as a single static Zig binary. It suits Firefox users, system administrators, and developers who need a portable, no-install tool to inspect or recover stored credentials on a local machine.
Keywise handles decryption without relying on browser libraries
Keywise reads Firefox profile database files directly and implements PBKDF2 and AES-256-CBC internally to decrypt entries, so it does not call the browser's NSS libraries. That design means the tool parses key4.db and logins.json itself and produces plaintext credentials in-session. The implementation choice reduces external dependencies and keeps the entire decrypt-and-display process inside the single executable.
The tool runs with a very small runtime footprint
Keywise is written in Zig and distributed as a single static binary, which contributes to fast startup and a minimal memory footprint. The executable requires no installation and has no external library dependencies, making it suitable for quick runs from USB drives or temporary folders. The small binary size and quick startup make it practical for on-demand credential inspection on desktop machines.
Local processing keeps sensitive data on the device
The utility performs all decryption locally and requires no network connectivity, so credentials are not transmitted to external servers. Because it reads profile files directly from disk, the tool needs filesystem access to the target Firefox profile, which means you must run it with permissions that can read those files. The open-source codebase lets reviewers confirm that processing occurs on-device.
Portability reduces setup but raises a small usability hurdle
Keywise runs without installation, which eliminates environment setup. That advantage also means users must locate and supply the correct Firefox profile files before use; finding the right profile folder can require familiarity with the browser's profile layout. For users comfortable locating profile directories, the single-binary approach simplifies deployment; less technical users may need guidance to find the required files.
Practical, low-overhead credential access for technically minded users
Keywise is a practical tool for anyone who needs quick, local access to Firefox-stored credentials without starting the browser. It keeps decryption on-device and avoids external dependencies, making it convenient for ad-hoc recovery and administrative inspection. Tip: copy the profile files to a separate folder before running the tool to avoid touching a live profile. Recommended.
