OpenSesame

An encrypted vault for people, agents, and websites.

OpenSesame is a local-first, end-to-end-encrypted vault. Your master password derives the key that opens it; the server never sees that key. Keep passwords, passkeys, cards, notes, and agent secrets in one place, then let a website or an approved agent ask for a narrow, time-boxed grant instead of your password.

• Passwords, passkeys, TOTP, cards, and secure notes.
• An auth broker for static sites, with scoped share grants.
• Agent access that is explicit, auditable, and revocable.