How the encrypted vault works
The vault is a single entry in this browser's local storage. Your passphrase goes through PBKDF2 with SHA-256, a random 16-byte salt and 600,000 rounds to derive a 256-bit key, and the wallet groups are encrypted with AES-256-GCM under a fresh random 12-byte IV every time they are saved. GCM authenticates the data, so a wrong passphrase or a damaged file is detected rather than decrypted into garbage. All of this uses the browser's built-in WebCrypto; the derived key is marked non-extractable and is held in memory only while the vault is unlocked.
Nothing about the vault is sent to SOLTidy or anywhere else, and there is no account or server copy. That also means there is no recovery: if you forget the passphrase, or clear this site's data, the keys are gone. Download an encrypted backup (it still needs the passphrase) and keep it somewhere safe. The vault locks itself after 15 minutes without use and whenever you leave the page.
Funding many wallets at once
Funding uses the same engine as the SOLTidy multisender: up to 20 plain SOL transfers per transaction from your connected wallet, each transaction carrying its own fee of 0.0009 SOL per wallet in it. Send each gives every wallet the same amount; Top up to sends only the difference between each wallet's balance and your target, and skips wallets already there.
A brand-new wallet must receive at least the rent-exempt minimum for an empty account, 0.00065024 SOL at today's rent rate, or the network rejects the transfer; the tool checks this before you sign. Worked example: funding 50 new wallets with 0.02 SOL each takes 3 transactions and costs 1 SOL sent, 0.045 SOL in fees and 0.000015 SOL in network fees.
Sweeping wallets back
Sweeping uses the Wallet Consolidator's engine. In SOL only mode each wallet sends its whole balance to the destination in one transaction that it signs itself, with the network fee worked out exactly so the wallet ends at zero. In SOL and tokens mode it first moves every token to the destination (creating the destination's token accounts where needed, paid by the source), closes the emptied token accounts to recover their rent, then sends the SOL.
Before anything is signed, every wallet is checked: wallets that cannot pay their own network fees, or that would be left below the rent minimum, are listed with the reason and skipped. The fee is 0.0009 SOL per wallet swept, paid out of that wallet's own SOL. Three wallets are swept in parallel, you can stop at any time, and each finished wallet shows a Solscan link.
Questions & answers
Is it safe to store private keys in the browser?
The keys are encrypted with AES-256-GCM under a key derived from your passphrase, so the stored data is useless without it. They are still on this device, though, and anything that can run code in your browser while the vault is unlocked could read them. Use the vault for bot, launch and burner wallets, never for a wallet holding savings, and pick a passphrase you do not use elsewhere.
What happens if I forget my passphrase?
The vault cannot be opened, by you or by SOLTidy; there is no reset. Sweep funded wallets back and export the keys or an encrypted backup while you still have access.
Can I use the same wallets on another computer?
Download the encrypted backup, move the file, and use Restore backup on the other browser with the same passphrase. You can also export the keys as CSV, but that file is not encrypted.
How much does it cost to fund or sweep wallets?
0.0009 SOL per wallet funded and 0.0009 SOL per wallet swept, plus Solana network fees of 0.000005 SOL per transaction and a small priority fee. Storing, generating and exporting wallets is free.
Does the vault lock by itself?
Yes. It locks after 15 minutes without use and whenever you leave or reload the page, which drops the decrypted keys and the derived key from memory. You can also press Lock at any time.
