Modern by default
Smooth transitions, dark and light themes and a native feel on macOS, Windows and Linux. People use tools they actually want to open.
KPrust is an open-source, offline-first password manager. It pairs KeePass-grade security with a modern desktop app, keeps your SSH and GPG keys in the same vault, and shows every change on a timeline you can roll back.
The secure, self-hosted options have interfaces that haven't changed in a decade. The polished ones need an account and a company's servers. And SSH and GPG keys usually end up unencrypted on disk or stuck in one machine's keychain.
KPrust keeps everything in one encrypted vault on your own disk. It works completely offline, and sync is optional through Git-annex, with no account and no lock-in.
Smooth transitions, dark and light themes and a native feel on macOS, Windows and Linux. People use tools they actually want to open.
SSH and GPG keys live inside the encrypted vault and are handed to ssh-agent or gpg-agent when you unlock. One source of truth, any machine.
Full snapshots of every entry with one-click restore, plus a local hash-chained log of every change. No paid tier needed.
All cryptography runs in Rust. The app window talks to the core only through restricted IPC, so no JavaScript can ever read the master key.
| Layer | Choice | Why |
|---|---|---|
| Key derivation | Argon2 | Memory-hard, slows brute force |
| Encryption | AES-256-GCM | Authenticated encryption for every entry |
| Integrity | HMAC-SHA256 | Detects tampering with the vault |
| Memory | zeroize | Secrets are wiped after use |
| Library | RustCrypto | Audited, widely used Rust crates |
MIT or Apache 2.0. Free to use, modify, fork and self-host forever.
Built in Rust with Tauri v2 for macOS, Windows and Linux.