keypile.
$ keypile --offline-first --argon2id --sync
A password manager without the either-or: keypile combines a local, file-based vault with true everywhere-access. Free and fully usable offline — syncing through your own cloud storage included. For macOS, Windows and Linux.
Try Free now — alpha
The free version is out now as an alpha for macOS, Windows and Linux: a local vault with categories, generator, password check, import/export and sync via your cloud folder. Updates arrive signed, right in the app — keypile unlocked follows with the beta.
// Alpha means: format and crypto are documented but not externally audited yet — so please don’t trust it with production passwords just yet. If macOS says “damaged”, it’s only missing notarization — one line in Terminal fixes it: xattr -dr com.apple.quarantine /Applications/keypile.app
All versions & details on GitHub →The best of both worlds
// local vault + everywhere-sync, minus the compromises
Anyone who wants to manage passwords themselves today has to choose: local and offline — or synced and everywhere, but with a server of your own to maintain. keypile covers both feature lists, in one tool.
// from the offline world
Your vault is a file
Every entry lives in a single encrypted file on your device. No account, no server, no internet required — a copy on a USB stick already is a backup.
// from the offline world
Tools for power users
Category templates, TOTP codes, file attachments, auto-type and a CLI for scripting — the features classic offline vaults are loved for are part of keypile; one-time codes and attachments launch as part of unlocked.
// from the sync world
The same state everywhere
One vault on every device, autofill in the browser and shared entries for family or team — just without a server of your own to secure, update and fix while on vacation.
// the LAN-SOLO habit
Zero-knowledge, as always
The same discipline as secrets and all/backed: whatever leaves your device is already encrypted. Neither a cloud drive nor our servers ever see plaintext.
// Just as important: no forced account for local use, no subscription for the basics, no proprietary format holding your data hostage.
Features
// planned for version 1.0
Local vault, offline first
Your passwords live in one encrypted file on your device — fully usable offline, with no account and no subscription. The cloud is an option, not a requirement.
AES-256 + Argon2id
State-of-the-art encryption: AES-256 for the vault, Argon2id against brute force on your master password — optionally strengthened with a key file or hardware key.
Sync through your cloud
Put the vault in Dropbox, Google Drive, iCloud Drive or on WebDAV — keypile detects changes and merges states without conflicts. The service only ever sees ciphertext. Included in Free.
TOTP & passkeysunlocked
Generate two-factor codes right inside an entry and keep passkeys safe — one vault for everything you sign in with. Part of keypile unlocked.
Audit & password check
Free spots weak and reused passwords at a glance. The full audit — leak screening via k-anonymity and password age — belongs to unlocked.
Import without regret
Imports common vault formats — .kdbx, JSON and CSV — and exports again anytime. Your data is never stuck in a format.
Browser plugin with autofillunlocked
Fill credentials right on the page and save new logins automatically — as a plugin for Chrome and Firefox, built natively into browse.
Device sync without a cloud driveunlocked
End-to-end encrypted sync across all your devices through our infrastructure — without running a server or setting up a cloud drive.
Share securelyunlocked
Share individual entries with family or team — sealed for the recipients and revocable at any time. For the quick one-off case, secrets remains the right choice.
$ browse --with keypile
Autofill, built right in
In our browser browse, the keypile plugin is not an add-on but a component: autofill without extension limits, unlocked with your browser profile and hardened against phishing — while the vault stays the same file as everywhere else.
open ./tools/browsePricing
// free locally — unlocked to follow
Free
The local password manager without limits
- Local vault with unlimited entries
- Categories & templates: logins, cards, identities, notes, licenses …
- AES-256 + Argon2id, optional key file/hardware key
- Sync via Dropbox, Google Drive, iCloud Drive or WebDAV
- Password check (weak/identical) & passphrase generator
- Import/export: .kdbx, JSON, CSV — plus in-app updates
unlocked
One vault for everything, on all your devices
- Everything in Free
- One-time codes (TOTP/2FA) right inside an entry
- Encrypted file attachments in the vault & passkeys
- Full audit: leak screening (k-anonymity) & password age
- Browser plugin with autofill for Chrome, Firefox and browse
- E2E device sync without a cloud drive, secure sharing, mobile apps
Free stays free — the local vault is not a trial. keypile unlocked: €12 a year (€1 a month), purchasable from the beta — until then all of it is free to test in the alpha. Incl. VAT, billed yearly, cancel anytime.
// Honest as always: you don’t trust half-finished things with your passwords. keypile only enters beta once the vault format and encryption are documented and externally audited — the launch will be announced on this page.