A team-oriented open source password manager with a focus on transparency, usability and security.

No dependencies

Built around native web technologies, it only uses your browser engine which must follow the latest W3C web cryptography implementation. This means you should be able to retrieve your secrets from any device with a modern browser and an internet connection.

Transparency and security

The source code is available for review and improvement, following the best practices in open source project management : pull requests need to be validated by multiple core maintainers, integration test validation... Confidentiality of your secrets is ensured even if transport or storage is compromised, by using client-side cryptography.

Usability

Don't bother with synchronisation between devices, it is already done. Moreover, being open source doesn’t necessarily mean a broken interface and user experience, and secret-in tries to iterate on real user feedback.

Shareability

A secret is not only a password. Usually, passwords are shared between team members (router admin passwords...) or even family members (credit card, netflix account...). Secret-in goes deeper as it manages any secret to be shared with anybody with more granularity and flexibility . No super admin here. Every user is the manager of his own secrets.

Team orientation

You can host your own secret-in server thanks to an easy to read documentation. Team members actions are traceable on the server side, which allows better control and management. Don’t worry, only team members can decrypt these logs. If a team member unfortunately leaves, you can know which secrets are involved and change them easily.

What's next

Soon

Secret history
Trace access
Export/Import between secret-in instances
UI/UX improvement
Documentation improvement
Institutional website

Not too soon

Native mobile application
Browser extension
Import from other password manager