Passkeys CLI - Secure Password Manager for Developers
Secure Password Manager
for Developers
Stop storing credentials in plain text. Use Passkeys CLI to encrypt, manage, and access your secrets directly from your terminal workflow.
╔════════════════════════════════════════╗ ║ Passkeys CLI - Main Menu ║ ╠════════════════════════════════════════╣ ║ 1. View passkeys ║ ║ 2. Create passkey ║ ║ 3. Update passkey ║ ║ 4. Delete passkey ║ ║ 5. Generate password ║ ║ 6. Exit ║ ╚════════════════════════════════════════╝
Enterprise-Grade Security
Built with modern cryptography standards to ensure your data stays yours. No compromises on security or usability.
AES-GCM Encryption
Authenticated encryption with associated data (AEAD) ensures confidentiality and data integrity for every secret stored.
Argon2 KDF
Winner of the Password Hashing Competition. Highly resilient against GPU-based brute-force attacks and side-channel exploits.
Cross-Platform
Write once, run everywhere. Seamless experience across macOS, Linux, and Windows terminals with consistent keybindings.
Zero-Knowledge
We never see your master password or keys. Your vault is decrypted only in memory on your local machine.
Local-First
Your data lives on your disk. Sync optionally via encrypted git repositories or your own cloud storage provider.
Audit Logging
Comprehensive immutable logs track every access, modification, and export event for compliance and security auditing.
Get started in seconds
Passkeys CLI is distributed as a Python package. Install it globally and initialize your first vault with a single command.
Our Security Philosophy
We believe that developer tools should be secure by default, not by configuration. Passkeys CLI is architected around the principle that your secrets are most vulnerable when they leave your machine. By keeping encryption local and utilizing memory-safe handling for sensitive buffers, we minimize the attack surface significantly compared to cloud-native alternatives.
Why Argon2id?
We chose the Argon2id variant for Key Derivation because it provides a hybrid resistance against both side-channel attacks and GPU cracking farms. This ensures that even if your encrypted vault file is stolen, brute-forcing the master password remains computationally prohibitive.
Frequently Asked Questions
Common questions about Passkeys CLI security, features, and usage