Markets
Sesame Shipped an AGPL-3.0 Local-Vault Password Manager With No Account Required and a Security Review Still Pending
Sesame (Show HN, 2026-08-28, 62 points) is a desktop password manager storing vaults locally with no account or server needed for core operation, handling logins, TOTP, security checks and backup; the desktop app, browser extension, website and optional sync server are all AGPL-3.0-or-later on GitHub. It is free during public beta, Windows-only so far, with a paid hosted plan reserved for a Sync service that has not shipped. The maintainers explicitly tell users to test with dummy credentials until an independent security review completes, which is the right disclosure and also the reason to rate this low for now.
↳ Follow the thread