Sesame: Local-first open-source password manager without required accounts

What it does

Sesame is a desktop password manager that stores vault data locally as an encrypted file on the user's computer. The application can generate, import, search, and organize passwords, two-factor authentication codes, and recovery codes without requiring an account or internet connection. It imports from 15 password manager formats and three authenticator formats. The software includes a security check feature that flags weak passwords and supports encrypted backups stored locally.

Who it is for

Sesame targets users who want password management without account registration or cloud storage dependency. It suits people migrating from other password managers, users concerned about centralized data storage, and those who prefer keeping credentials entirely offline. The project is currently in early beta and explicitly targets testers and people willing to review code, not production users.

Pricing

The site does not show prices. A hosted sync service is mentioned as planned optional paid functionality but is not yet available. The desktop application and server software are free and open source under AGPL-3.0-or-later licensing.

How it stands out

Sesame's core distinction is the default local-first architecture. Users can create and operate a complete vault without ever contacting the company's servers. The vault file itself never leaves the user's device unless deliberately exported. The optional website account only handles account credentials and device linking, never vault contents. The project is fully open source, allowing users to self-host the server and account portal if desired. It reads imports from a broad ecosystem of existing password managers, reducing switching friction.

What a founder should check

A competitor should verify the security implications of Sesame's local-first design and whether users actually demand offline operation or if cloud sync is the primary expectation. Second, examine whether the import compatibility moat holds value—fifteen supported formats are convenient, but this advantage erodes as any new manager adds export features. Third, assess pricing pressure: if the optional paid sync service eventually launches at standard password manager rates (ten to fifteen dollars annually), determine whether the free local-only tier cannibalizes premium adoption or if users naturally upgrade for cloud features.

Thinking of building something like this?

Every launch here is a competitor to somebody's idea. If yours is close, check it against the market before you build: the Full Check names the rivals, the prices and the gaps.