Building the parts around the vault carefully.

The Windows app owns the vault.

Vault creation, unlocking, search, TOTP, imports, checks, backups, restore, export, and deletion run in the desktop app. A Sesame account is optional and does not unlock or identify a vault.

Sesame Sync

The ciphertext-only protocol is built. A new device is approved by an existing one, which seals the vault key to it; encrypted changes are signed by the device that made them; and concurrent edits stop for review rather than silently discarding data.

Not available: no desktop vault uploads to Sesame today. None of it is reachable in a released build, and the service will not be opened until an independent review of the protocol, key handling, and recovery paths is complete.

Browser extension

The extension uses native messaging rather than a local server. It detects supported sign-in fields, handles multi-step and single-page sign-in flows, and fills only after a user action and desktop approval. It never submits the page and never writes a credential to extension storage. The inline field control is optional, stays off until you grant host permission, and can be paused per origin or revoked at any time.

Reproducible Chrome and Edge upload archives build today with recorded digests and a fixed extension identity the native host manifest must match. Before release it still needs store submission, a signed desktop installer that registers, upgrades, and removes the native host, clean-profile install and removal verification, and the automated test suite that is currently being rewritten.

Payment

Sesame Sync is planned at EUR 1 monthly or EUR 10 yearly, and it is the only thing Sesame intends to charge for. There is no paid edition of the application: it is AGPL software, and a feature will not be moved behind a payment.

Payment can gate new hosted syncing activity, and nothing else. It can never gate local vault access, unlocking, backup, export, or recovery. Because the sync service is published under the same licence, paying Sesame to host it is a convenience, not the only route to it.