Bitwarden – Free and Open Source Password Manager
Your crypto choices seem somewhat unusual.  PBKDF2, while not necessarily unsafe, is a fairly old KDF to choose for a new product.  Can you go into more detail about your rationale for choosing this over newer KDFs?  Why did you choose AES256-CBC over other, safer modes?  Why are you doing crypto in javascript despite shipping browser extensions and mobile clients?I don't want to imply that these things automatically make it insecure, but to me at least they raise questions, and none of your copy appears to address this.  Thanks!