local-first · encrypted · desktop
Kokos Password Manager
A local-first, encrypted password manager for the desktop. A vault is a single file on your own disk. There is no Kokos account and no Kokos server.
- vault encryption
- XChaCha20-Poly1305
- key derived from your master password
- Argon2id
- accounts, servers, telemetry
- 0
- platforms: macOS, Linux, Windows
- 3
./features
What it does
./vault
One encrypted file per vault
Optional key file as a second secret. No password recovery: the master password never leaves the device.
./tabs
Several vaults at once
Each vault in its own tab, locked independently.
./entries
Entry types
Login, card, secure note and Wi-Fi, with custom fields, field templates, attachments, edit history and live TOTP codes.
./search
Search and command palette
Instant full-text search, favourites, regex search, and ⌘K for every action.
./health
Password generator and health
Weak and reused passwords are found locally.
./breach
Breach check (opt-in)
Against Have I Been Pwned with k-anonymity: only the first five characters of a SHA-1 hash are sent.
./sync
Sync (opt-in)
Through a folder you already sync, or your own Google Drive app-data folder. Only the encrypted file is uploaded.
./import
Import and export
Kokos JSON, encrypted .kokos copies, KeePass .kdbx, and AI-assisted import of passwords kept in plain text files. The AI model runs locally.
./browser
Browser extension
Saves and fills logins over a local native-messaging bridge with per-site permission.
./lock
Auto-lock and clipboard auto-clear
Optional Touch ID or keychain unlock on macOS.
./privacy
Nothing leaves your machine unless you say so
Synchronisation and the breach check are off by default. Kokos has no telemetry, no analytics, no crash reports and no advertising.
./stack
Built with
- Core
- Rust
- Shell
- Tauri 2
- Interface
- React and TypeScript
- Platforms
- macOS, Linux, Windows
- Licence
- MIT
./install
Install
Releases will be published on the GitHub Releases page. Building from source needs Rust (stable), Node.js 20.19 or later and the Tauri prerequisites for your platform.
The licence covers the code, not the name. "Kokos" and the Kokos logo are not licensed: a fork or a derivative may not be distributed under this name or a confusingly similar one.
./legal