Back in 0.4.0, Chervil grew a proper password manager: an encrypted, passphrase-locked vault, saved logins filled into real sites with the 🔑 button, and a firm rule that Sprig never sees any of it. It's been quietly doing its job ever since.
0.12.0 adds the other thing you retype all day: your payment cards. Same vault, same passphrase, same rules — now there's a 💳 button that fills your card at checkout so you don't have to dig the plastic out of your wallet again.
Cards, in the same vault
Add a card in Settings → Security → Payment cards — the name on it, the number, the expiry. On a checkout page, click 💳, pick the card, and Chervil fills the cardholder name, number, and expiry. It handles the messy reality of payment forms: combined MM / YY fields, separate month and year inputs, dropdown selectors.
Cards ride in the same encrypted vault as your passwords — one master passphrase, AES-256-GCM plus your OS keychain, the same auto-lock. Unlock once and both are available for the session; lock it and everything needs the passphrase again.
The security code stays with you
Here's the deliberate part: Chervil never stores your card's CVC — the three or four digits on the back. That's the single most sensitive number on the card, and card networks discourage storing it for good reason. So we don't. Chervil fills everything except the security code, and you type that yourself at checkout. It's a small bit of friction that keeps the riskiest digit out of the vault entirely.
The rest of the guarantees are the ones you already know from passwords:
- Never auto-submitted. Chervil fills the fields. You review the order and click Pay.
- Never shown to Sprig. Card details are never placed in a prompt to Sprig or any AI model — full stop.
- Never in plaintext. Nothing is written to the settings or session files; only the encrypted vault. Card listings show just the brand and last four digits (
Visa ····1234); the full number is decrypted only for a reveal in Settings or the instant it takes to fill a form.
Make Chervil your default — for real this time
0.11.0 shipped a "Make default…" button. It had a problem: on Windows it opened the Default apps page, but Chervil wasn't even listed there as a browser to pick — so it looked like it did nothing. Fair.
0.12.0 fixes it properly. Chervil now registers its browser capabilities in the Windows registry (per-user, no admin prompt), so it shows up as a real, selectable web browser and the button deep-links straight to its entry in the picker. It keeps that registration fresh across updates, and it's honest about the one step Windows still makes you do — no app is allowed to silently seize the default browser, and any that claims otherwise is lying to you.
A tidier address bar
Small one: if you'd rather not see the 🔑 and 💳 buttons in your address bar, there are now show/hide toggles for each in Settings → Security. They're on by default, and they only ever appear on real sites where you actually have a login or card saved to fill.
Passwords were about not typing the same secret into the same site for the hundredth time. Cards are the same idea at checkout — with the sensitive part still firmly in your hands. Download 0.12.0, set your master passphrase, and let Chervil carry the wallet.