Bitwarden – Free and Open Source Password Manager
Your crypto choices seem somewhat unusual.  PBKDF2, while not necessarily unsafe, is a fairly old KDF to choose for a new product.  Can you go into more detail about your rationale for choosing this over newer KDFs?  Why did you choose AES256-CBC over other, safer modes?  Why are you doing crypto in javascript despite shipping browser extensions and mobile clients?<p>I don't want to imply that these things automatically make it insecure, but to me at least they raise questions, and none of your copy appears to address this.  Thanks!