OpusRepo
A password manager that stays on your PC.
Beta testers wanted. Try OpusRepo early and help shape what comes next. This is a beta that has not yet been independently reviewed.
One encrypted vault file that you control, with built-in one-time codes, a printable recovery kit, and sharing for the moments you need it. No account, no server, and nothing sent anywhere. It runs on your PC and keeps its data where you tell it to.
OpusRepoComing soon for Windows and Mac
A recovery kit you can actually use
Setup ends with a printable recovery kit, so a forgotten master password is a bad afternoon and not the end of your data. Split it into three shares if you like, and use the buttons to open Google Drive, iCloud Drive or OneDrive in your browser to upload your copy. OpusRepo never signs in to those for you.
What it does
-
Encrypted vault file
Everything lives in one file, locked with a key made from your master password using Argon2id and XChaCha20-Poly1305. Opened without the password, it is scrambled data.
-
Recovery you can plan for
A printed recovery kit opens the vault if the master password is forgotten, and can be split so any 2 of 3 shares work. The kit never contains your master password.
-
One-time codes built in
Codes with a countdown sit next to the login they belong to. Set them up by scanning a QR code on your screen, with no camera, or paste a setup key or a picture.
-
Your cloud folder, your choice
Keep the vault on this PC, or in a OneDrive, Google Drive, iCloud Drive or Dropbox folder. Saves are automatic but not real-time, so there is a Sync now button, and changes from two PCs merge item by item.
-
Sharing without an account
Share one item as a locked page that opens in any browser, or as an OpusRepo share file. Send the passphrase by a different route.
-
Six kinds of items
Logins, secure notes, cards, identities, servers and devices, and software licenses. Add custom fields, folders, tags, favorites, and see your last ten passwords for each item.
-
Renewal reminders
Put a renewal or expiry date on any item, then save a calendar reminder or paste a task into OpusLists.
-
Health report
See weak, reused and old passwords on your own PC. An optional breach check is off until you turn it on, and sends only a short hash prefix, never a password.
-
Careful by default
Auto-lock, masked passwords, a clipboard that clears itself after 30 seconds, and a window hidden from screen capture where Windows allows it.
-
Move in and out
Import from Chrome, Edge, Bitwarden, 1Password, LastPass and KeePass. Export an encrypted file, or a plain CSV behind a warning.
What to know before you trust it
-
It is a beta
OpusRepo has not been independently reviewed yet. Start with accounts you can afford to reset, and keep your recovery kit safe.
-
No master password reset
There is no server and no account, so nobody can reset it for you. That is the point, and also the risk.
-
It cannot beat malware
If something malicious is already running on your PC as you, no local password manager can protect what you type or see.
-
What is next
A browser extension comes next, then the Mac version. Read the threat model in the project docs for the full list.