Keepr – A Secure and Offline Open Source CLI Password Manager
Hi HN, I made Keepr, a simple offline CLI password manager for developers who prefer keeping secrets local and working entirely in the terminal. Everything is stored in an encrypted SQLCipher database, protected by a master password. A time-limited session keeps the vault unlocked while you work, so you don’t need to re-enter the password constantly. Keepr never touches the network. It includes commands to add, view, search, update, and delete entries, plus a secure password generator and clipboard support. Technical details: - AES-256 via SQLCipher - PBKDF2-HMAC-SHA256 (1.2M iterations) for…
In plain words
Keepr is an open source CLI password manager designed for developers who want to store credentials locally without network access. It uses AES-256 encryption via SQLCipher with PBKDF2-HMAC-SHA256 key derivation to protect a master password-encrypted database. The tool offers commands to add, view, search, update, and delete password entries, includes a secure password generator, and maintains a time-limited session so users don't repeatedly re-enter their master password while working in the terminal.
written from the facts on this page · September 2026
From the sources
In the maker’s words, at launch
Hi HN, I made Keepr, a simple offline CLI password manager for developers who prefer keeping secrets local and working entirely in the terminal. Everything is stored in an encrypted SQLCipher database, protected by a master password. A time-limited session keeps the vault unlocked while you work, so you don’t need to re-enter the password constantly. Keepr never touches the network. It includes commands to add, view, search, update, and delete entries, plus a secure password generator and clipboard support. Technical details: - AES-256 via SQLCipher - PBKDF2-HMAC-SHA256 (1.2M iterations) for deriving the KEK - KEK decrypts a stored PEK, which encrypts the vault - Session file holds the PEK until expiry GitHub: https://github.com/bsamarji/Keepr PyPI: https://pypi.org/project/Keepr/ I would love some feedback, criticism or any questions, especially on UX or security! Thanks for looking!
Does the same job
all alternatives →
- KEKeeper – embedded secret store for Go (help me break it)Apr 2026 · github.com · ▲64
Keeper is an embeddable secret store (Argon2id, XChaCha20-Poly1305 by default). Four security levels, audit chains, crash-safe rotation. Vault is overkill for most use cases. This is for when you ge paranoid about env and need encrypted local storage that doesn't suck. No security through obscurity, hence, It's still early, so now's the best time to find weird edge cases, race conditions, memory leaks, crypto misuse, anything that breaks. The README has a full security model breakdown if you want to get adversarial.
Sesame - a local-first, open-source password manager9d ago · usesesame.app · ▲65I have been working on Sesame, an open-source password manager that keeps your vault local by default. You don't need an account to create or use a vault, and the hosted service never receives the vault itself. It's still early software and the independent security review isn't finished yet, so I am mainly interested in feedback, testing, and people looking through the code. (Linux support is yet to be released on v0.1.2, but currently is in the works.)
LumenPass - Password ManagerJun 2026 · lumenpass.app · ▲4Modern KeePass: private, cross-platform, affordable.
- SHSelf-hosted and self-contained web app password manager written in Go2020 · ▲40
I have written a passwords/secrets manager for my personal needs. Maybe it solves some of your problems too. It is written in Go and is a self-contained executable for a small web-app: https://github.com/jarmo/secrets-web There is also a CLI version if that is your taste: https://github.com/jarmo/secrets-cli To read about more technical details, look into the core repository at https://github.com/jarmo/secrets Any questions/comments/suggestions are welcome in here or via GitHub pull requests.
Vault LocalJun 2026 · vault-local.vercel.app · ▲2Local-first password manager with military-grade encryption
More dev tools this month
the category →
The first open-source price index for GPU compute
Dev tools · 10d ago · getcomputable.com
OpenTrailPaper is open-source bike computer firmware for the LilyGO T5S3 4.7" E-Paper PRO. It supports offline maps, GPX routes, FIT recording and Bluetooth sensors.
Dev tools · 2d ago · opentrailpaper.com
Open-source GTM skills for technical founders
Dev tools · 29d ago · gtmcofounder.com
Launched alongside, November 2025
the whole month →
- IB
Life & fun · Nov 2025 · bitsnpieces.dev
- BBoing▲782
Life & fun · Nov 2025 · boing.greg.technology