Everything it does, and where it does it

All of this runs on your own devices, and every feature is in the free edition. Free holds up to 4 items; Pro removes the limit.

The vault

Encrypted on your disk: Everything you save is encrypted with a key protected by your master password, using Argon2id and AES-256-GCM. Names, usernames and websites are encrypted too, not just passwords.
More than passwords: Logins, secure notes, identities, bookmarks, software licences, purchases, warranties and subscriptions, each with its own fields.
Attachments: Attach files such as scanned documents to any item. Each file is encrypted with its own key.
Two-factor codes: Store the setup key for a site and LocalGateKeys shows the current six-digit code next to the login.
Password generator and health: Generate strong passwords and see which saved ones are reused, weak or missing two-factor codes.
Search and collections: Find items with a command palette (Ctrl+K), filter chips and your own collections.

Chrome and Edge extension: Fill and save logins on websites. The extension asks the app on your PC for logins that match the exact site, through a local helper. It never submits forms for you.
Prompts only where you allow them: By default the extension acts only when you click it. You can turn on save prompts for individual sites.
Windows app fill: Fill sign-in windows of Windows programs with a hotkey. Each app is bound once, and fill is refused if the program, its window or its fields have changed since.
No keylogging, ever: LocalGateKeys installs no keyboard hook, reads no screen content to find passwords, and injects nothing into other programs. If an app does not expose proper sign-in fields, it is not filled.

Master password: At least 12 characters, never written to disk. It is the one thing that opens your vault, and we cannot reset it.
Windows Hello: Unlock with your fingerprint, face or PIN through Windows Hello, after you set it up in LocalGateKeys.
Camera check: An optional webcam face check for PCs without Windows Hello. It is a convenience, not certified anti-spoofing; prefer Windows Hello when you can.
Recovery phrase: An optional 24-word phrase that can open the vault if you forget the master password. It is shown once and never stored by the app.
Auto-lock and clipboard clearing: The vault locks after a period you choose, and copied passwords are cleared from the clipboard.

Scheduled encrypted backups: Daily or weekly, at a time you set. Each backup is a full encrypted file, checked after writing, with attachments included.
Extra copy in a folder you choose: Have each backup copied to a OneDrive, Google Drive, Dropbox or Proton Drive folder, or anywhere else. Only encrypted backup files are copied, never the live vault.
Encrypted transfer packages: Move selected items to another vault in an encrypted file protected by its own password.

Over your home Wi-Fi: Paired devices on the same network exchange changes directly, encrypted with keys only those two devices hold. This is the default sync route.
Through your own cloud folder: If your devices are rarely on the same network, turn on sync through a cloud-drive folder you already use. The provider only ever stores encrypted files.
iPhone: An iPhone app is coming. It will sync with your Windows PC.

No account: You never sign up or sign in. A Pro licence is a key you keep, checked on your PC.
No telemetry: The app sends no usage data, crash reports or analytics.
Strict offline mode: Turn it on and the app makes no network requests at all, not even update checks.
Update checks you start: Checking for updates downloads one small signed file. The app never downloads or installs anything by itself.