mypass

A self-hosted, single-user password manager. All cryptography happens on your device. The storage backend never sees your plaintext data.

---

what it does

• End-to-end encrypted vault using XChaCha20-Poly1305
• Key derivation via Argon2id with tuneable parameters
• Encrypted vault stored on any S3-compatible object store — zero-knowledge backend
• Biometric unlock (fingerprint / face) with secure device key caching
• TOTP support (scan QR codes or paste otpauth:// URIs)
• Tags and tag groups for organizing entries
• Soft-delete with 30-day auto-purge

platforms

• Android
• Linux
• Windows
• macOS
• iOS