Hi HN,
I made Keepr, a simple offline CLI password manager for developers who prefer keeping secrets local and working entirely in the terminal.
Everything is stored in an encrypted SQLCipher database, protected by a master password. A time-limited session keeps the vault unlocked while you work, so you don’t need to re-enter the password constantly. Keepr never touches the network.
It includes commands to add, view, search, update, and delete entries, plus a secure password generator and clipboard support.
Technical details:
- AES-256 via SQLCipher
- PBKDF2-HMAC-SHA256 (1.2M iterations) for deriving the KEK
- KEK decrypts a stored PEK, which encrypts the vault
- Session file holds the PEK until expiry
GitHub: https://github.com/bsamarji/Keepr
PyPI: https://pypi.org/project/Keepr/
I would love some feedback, criticism or any questions, especially on UX or security!
Thanks for looking!
I made Keepr, a simple offline CLI password manager for developers who prefer keeping secrets local and working entirely in the terminal.
Everything is stored in an encrypted SQLCipher database, protected by a master password. A time-limited session keeps the vault unlocked while you work, so you don’t need to re-enter the password constantly. Keepr never touches the network.
It includes commands to add, view, search, update, and delete entries, plus a secure password generator and clipboard support.
Technical details:
- AES-256 via SQLCipher
- PBKDF2-HMAC-SHA256 (1.2M iterations) for deriving the KEK
- KEK decrypts a stored PEK, which encrypts the vault
- Session file holds the PEK until expiry
GitHub: https://github.com/bsamarji/Keepr
PyPI: https://pypi.org/project/Keepr/
I would love some feedback, criticism or any questions, especially on UX or security!
Thanks for looking!