# OpenSesame

An encrypted vault for people, agents, and websites.

OpenSesame is a local-first, end-to-end-encrypted vault. Your master password derives the key that opens it; the server never sees that key. Keep passwords, passkeys, cards, notes, and agent secrets in one place, then let a website or an approved agent ask for a narrow, time-boxed grant instead of your password.

## What it does

- Stores passwords, passkeys, TOTP secrets, cards, and secure notes.
- Acts as an auth broker for static sites with scoped share grants.
- Gives agents explicit, auditable, and revocable access.
- Runs in the browser with no server-side vault key and no password recovery.

## Start

- [Open the vault](https://opensesame-labs.github.io/OpenSesame/)
- [Read the agent guide](https://opensesame-labs.github.io/OpenSesame/llms.txt)
- [About](https://opensesame-labs.github.io/OpenSesame/about.html)
- [Privacy](https://opensesame-labs.github.io/OpenSesame/privacy.html)
- [Contact](https://opensesame-labs.github.io/OpenSesame/contact.html)
- [Source code](https://github.com/OpenSesame-Labs/OpenSesame)
- [Documentation](https://github.com/OpenSesame-Labs/OpenSesame/tree/main/docs)