Keyorra

Password manager for macOS

Your passwords. On your Mac, nowhere else.

Keyorra keeps logins, cards and one-time codes in an encrypted vault on your Mac, and fills them in Chrome, Firefox and Safari. No account, no cloud, no subscription.

Free · Imports from 1Password · Open source soon

This is the real interface. Click around.

Pick an item, reveal or copy a password, watch the one-time code tick, try search, Settings… or Lock. Sample data only.

What it does

Everything you used 1Password for.

Built for one person and their Mac first, and built carefully.

Logins, cards, notes

Logins, secure notes, credit cards, identities, passwords and API keys, each with the fields it needs and custom ones you add.

Vaults and favorites

Keep personal and work apart. Star what you use most, search everything instantly.

Import from 1Password

Bring everything across from a .1pux export or CSV, with one-time codes and vaults. See what was found before anything is saved.

Strong passwords

A generator for random passwords and memorable passphrases, in the app and right on sign-up forms.

One-time codes

Store two-factor secrets next to the login. Codes refresh on a ring timer and fill in the browser with the password.

Safe copying

Copy a password and Keyorra clears the clipboard after 90 seconds. Locks itself after a few idle minutes and when the Mac sleeps.

Recently deleted

Deleted items stay for 30 days and come back with one click. Old passwords stay in each login's history.

Four themes

System, Light, Dark and Index, on a translucent window that lets your wallpaper through. Try them above.

Fast to find

Search from the list as you type. Everything is on your Mac, so results are instant.

Browser extension

Fills it in for you.

The Keyorra icon appears in login, sign-up, card and address fields. One click fills the username, password and one-time code.

  • Offers to save a new login, or update a changed password, right after you sign in
  • Suggests a strong password on sign-up forms and saves it at once, so it is never lost
  • Fills cards and addresses on secure pages only
  • Pairs with the app by a six-digit code and keeps no secrets of its own
ChromeBraveEdgeOperaYandexFirefoxSafari
github.com/login

Security

Your vault never leaves your Mac.

There is no Keyorra server and no account. The vault is one encrypted file on your disk, and every item in it is encrypted on its own.

  • Argon2id stretches your master password: 64 MiB of memory, three passes
  • Each item is sealed with XChaCha20-Poly1305 and tied to its vault and id, so items can't be swapped
  • No password hash is stored; a wrong password simply fails to open the keys
  • Keys are wiped from memory when the vault locks
  • Standard, audited Rust crates; no home-made cryptography
master passwordonly in your head
↓ Argon2id
key-encryption keyderived, never stored
↓ unwraps
account keychanging the password re-wraps only this
↓ unwraps
vault keysone per vault, ready for sharing later
↓ XChaCha20-Poly1305
itemseach with its own nonce

Roadmap

What comes next.

Keyorra already replaces 1Password on the Mac. These are the next steps, roughly in order.

Next

Touch ID

Unlock with your fingerprint instead of typing the master password.

Next

Watchtower

Weak, reused and breached passwords, checked privately against Have I Been Pwned.

Next

Quick search

A menu-bar icon and a global shortcut to find and copy anything.

Later

Sync

Your own self-hosted sync server, still end-to-end encrypted.

Later

iPhone

Your vault in your pocket, with AutoFill.

Later

Sharing

Share one vault with family or a team, without exposing the rest.

Later

Passkeys

Store and use passkeys alongside passwords.

Later

Windows

The same app and extension beyond the Mac.

Questions

Before you switch.

Is it really free?

Yes. No subscription, no account, no paid tier. The source will be published as open source.

What if I forget my master password?

Nobody can recover it, including us. That is the point of local encryption. Keep it somewhere safe, offline.

Can I move from 1Password?

Yes. Export a .1pux file (or CSV) from 1Password, then use Import… in Keyorra. Logins, notes, cards, identities, one-time codes and vaults come across.

Does it sync between devices?

Not yet. Today the vault lives on one Mac. Self-hosted, end-to-end encrypted sync is on the roadmap.

Which browsers work?

Chrome and other Chromium browsers (Brave, Edge, Opera, Yandex), Firefox and Safari. The extension talks only to the Keyorra app on the same Mac.

Where is my data stored?

In the app's folder in ~/Library/Application Support, encrypted. Back it up like any other file.

Keep what matters.

Keyorra for macOS, with extensions for Chrome, Firefox and Safari.

Download for Mac

Free · No account · Releases on GitHub · Read the docs