Sesame
Use the desktop app on its own
You can create and use a vault without running a server or creating a website account.
A password manager that works without an account.
Your vault is a file on your computer. Sesame unlocks it, searches it, and copies from it with no account and no network connection.
Sesame is in early beta and has not had an independent security audit. Use test data for now.
How Sesame works
Logins, 2FA codes, security checks, and backups in one desktop app.
Choose the export from your old password manager. Sesame reads it on your computer, shows a preview, and saves only what you choose. Nothing is uploaded.
Bring everything with you
Sesame reads exports from 15 password manager and browser formats, and 2FA secrets from three authenticator formats. Every import shows a preview before anything is saved.
Password managers
- Bitwarden CSV and JSON
- 1Password
- LastPass
- Dashlane
- KeePass
- Keeper
- NordPass
- Proton Pass
Browsers
- Google Chrome
- Microsoft Edge
- Brave
- Firefox
- Google Password Manager
- Apple Passwords
2FA apps
- Aegis
- 2FAS
- otpauth link lists
Where your data lives
The vault needs nothing from the website. An optional website account covers signed downloads, licences, connected-device management.
On your computer
- Vault fileEvery login, card, note, 2FA secret, and backup code, encrypted and unlocked with your master password.
- Master password and unlock secretsYour PIN and Windows Hello setup stay on the device that created them.
- Imported exportsRead and parsed locally. Nothing is uploaded.
On the Sesame website
- Account email and password hashOnly if you create an account. Used to sign in to the account portal, and it cannot open a vault.
- Support requests and linked desktopsWhat you write to support, and a record of each desktop you link. Neither holds vault data.
- Product and release informationVersion numbers, download checksums, and project status.
Read the source
The desktop app, browser extension, website, and optional server are licensed under AGPL-3.0-or-later.
What self-hosting covers
You can run the server, account portal, and admin interface yourself. Hosted Sync is planned as an optional paid service. Sync is not available yet.
Commits in the last 30 days, counted 27 September 2026
- sesame-desktop The Windows and Linux app and its Rust vault core. 273 commits Last push 26 September 2026
- sesame-server The vault-blind Go API, account portal, and admin interface. 175 commits Last push 26 September 2026
- sesame-website The public website and its build scripts. 63 commits Last push 26 September 2026
- sesame-browser-extension The Chrome, Edge, and Firefox extension. 78 commits Last push 26 September 2026
Public beta
Try Sesame with test data
Version 0.2.5 was released on 16 September 2026. Each release lists its SHA-256 checksums. Keep a separate backup of anything you cannot afford to lose.
In this beta
- Local vault
- Imports from other managers
- 2FA codes
- Security checks
- PIN unlock
- Windows Hello on Windows
- Encrypted backup and export
Not shipped yet
- Sync
- Mobile apps
- Passkeys
- Sharing
- Emergency access