Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions README.md
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
# KeePass Web

A password manager that reads and writes [KDBX][kdbx] database files entirely in your browser. A multi-page application of single-purpose HTML pages — no native application install, no web server, and no network: just your KeePass database file viewed and edited in your browser tab's memory. This repo is the source for the whole thing: the crypto primitives, the KDBX parser, the browser app, and the tooling that builds each page into its own distributable HTML file. The app and every offline page use no external dependencies at all; the optional cloud connectors are the sole exception, and only to load the sign-in provider's own SDK — see [Trust](#trust).
A password manager with no backend: each page is a single, self-contained HTML file that reads and writes [KDBX][kdbx] database files directly in your browser tab, with no native application install, no web server, and no network in the loop. This repo is the source for the whole thing: the crypto primitives, the KDBX parser, the browser app, and the tooling that builds each page into its own distributable HTML file. The app and every offline page use no external dependencies at all; the optional cloud connectors are the sole exception, and only to load the sign-in provider's own SDK — see [Trust](#trust).

## Contents

Expand All @@ -25,7 +25,7 @@ The whole point of shipping as a multi-page application of un-minified HTML page

See [Contributing][contributing] for how to report a bug, propose a change, and build/test/lint locally. See each package's own `README.md`/`SPEC.md` (`packages/argon2`, `packages/chacha20`, `packages/kdbx`) for the algorithms implemented and why.

This project is MIT-licensed and entirely free — including the connectors that open your database from your own cloud storage provider — and open to everyone with no sponsorship gate. We don't provide storage; you connect to a provider you already have. [GitHub Sponsors][sponsors] funds ongoing development and security audits; it is an invitation, never a paywall. See [Licensing][licensing] for how that works.
This project is MIT-licensed and entirely free — including the connectors that open your database from your own cloud storage provider — and open to everyone with no sponsorship gate. We don't provide storage; you connect to a provider you already have. [GitHub Sponsors][sponsors] is how people who find it valuable can support the people building it; it is an invitation, never a paywall. See [Licensing][licensing] for how that works.

## License

Expand Down
2 changes: 1 addition & 1 deletion docs/CONTRIBUTING.md
Original file line number Diff line number Diff line change
Expand Up @@ -62,7 +62,7 @@ Pull requests are required on `main`; direct pushes are blocked. See [Branch pro

## Sponsoring

This project is MIT-licensed and entirely free — every feature, including the connectors to your own cloud storage provider, is open to everyone with no sponsorship gate. We don't provide storage; you connect to a provider you already have. [GitHub Sponsors][sponsors] funds development and security audits; it is a voluntary invitation, never a paywall. See [Licensing][licensing] for how that works.
This project is MIT-licensed and entirely free — every feature, including the connectors to your own cloud storage provider, is open to everyone with no sponsorship gate. We don't provide storage; you connect to a provider you already have. [GitHub Sponsors][sponsors] is how people who find it valuable can support the people building it; it is a voluntary invitation, never a paywall. See [Licensing][licensing] for how that works.

[issues]: https://github.com/keepass-web/source-application/issues
[discussions]: https://github.com/keepass-web/source-application/discussions
Expand Down
4 changes: 2 additions & 2 deletions docs/PAGES.md
Original file line number Diff line number Diff line change
Expand Up @@ -45,15 +45,15 @@ On save, since there is nowhere to write back to, the local connector downloads

**Handoff and save.** The connector and the embedded app exchange same-origin messages: the connector hands the app the file's bytes, and on save the app hands the edited bytes back for the connector to write to Drive. The local-download option is hidden while embedded. Opened on its own, `0x67.html` receives no such messages and behaves exactly as it does standalone.

## Local storage
## Opening from local disk

Opening a database from local disk needs nothing but the file itself: no account, no sign-in, no network connection. `local.html` and `0x67.html` work completely offline, so a vault on a USB drive or a personal laptop opens the same way whether there's an internet connection or not. Nothing about the file goes anywhere — there's no vendor, no OAuth exchange, and no service to trust beyond the browser itself. Opening a local file needs no account of any kind and is open to every visitor.

## Cloud storage providers

Anyone can open and save a database directly from Google Drive and other cloud storage providers (as demand drives adoption), without ever downloading it to disk. The file's bytes go straight into browser memory, get edited there, and are written straight back to the provider; on-disk storage is never part of the round trip. That's more convenient than the download-edit-reupload cycle a local file requires, and it's more secure. On a computer whose disk can't be accessed, trusted, or written to like a public library terminal, a locked-down kiosk, a borrowed laptop, there's nothing on that disk to worry about, because the vault was never on it.

The cloud connectors are open to every visitor: there is no sponsorship gate, and opening a cloud vault requires only your own provider's sign-in and the master password — never a GitHub login. KeePass Web provides no storage of its own; it connects to a provider you already have. Building and maintaining these connectors, along with the project's security audits, is funded voluntarily through [GitHub Sponsors][sponsors]. The app invites sponsorship but never requires it.
The cloud connectors are open to every visitor: there is no sponsorship gate, and opening a cloud vault requires only your own provider's sign-in and the master password — never a GitHub login. KeePass Web provides no storage of its own; it connects to a provider you already have. [GitHub Sponsors][sponsors] is how people who find the connectors valuable can support the people building them. The app invites sponsorship but never requires it.

[sponsors]: https://github.com/sponsors/keepass-web
[picker]: https://developers.google.com/workspace/drive/picker/guides/overview
Expand Down
4 changes: 2 additions & 2 deletions pages/index/page.html
Original file line number Diff line number Diff line change
Expand Up @@ -12,8 +12,8 @@
<div class="wordmark"><span class="mark"></span>KeePass Web</div>
<h1>Your passwords.<br>Your storage.<br>Your browser.</h1>
<p class="description">
A KDBX password manager that runs entirely in your browser —
no installation, no servers, no secrets leaving your machine.
A KDBX password manager with no backend — a self-contained HTML
file, no installation, no servers, no secrets leaving your machine.
</p>

<div class="open">
Expand Down