Sesame
Use the desktop app on its own
You can create and use a vault without running a server or creating a website account.
A password manager that works without an account.
Your vault is a file on your computer. Sesame unlocks it, searches it, and copies from it with no account and no network connection.
Sesame is in early beta and has not had an independent security audit. Use test data for now.
How Sesame works
Sesame keeps your logins, 2FA codes, security checks, and backups in one desktop app.
Choose the export from your old password manager. Sesame reads it on your computer, shows a preview, and saves only what you choose. Nothing is uploaded.
Bring everything with you
Sesame reads exports from 15 password manager and browser formats, and 2FA secrets from three authenticator formats. Every import shows a preview before anything is saved.
Password managers
- Bitwarden CSV and JSON
- 1Password
- LastPass
- Dashlane
- KeePass
- Keeper
- NordPass
- Proton Pass
Browsers
- Google Chrome
- Microsoft Edge
- Brave
- Firefox
- Google Password Manager
- Apple Passwords
2FA apps
- Aegis
- 2FAS
- otpauth link lists
Where your data lives
Your vault works without the website. A website account is optional, and it is only for signed downloads, licences, and connected-device management.
On your computer
- Vault fileEvery login, card, note, 2FA secret, and backup code is encrypted in it, and your master password unlocks it.
- Master password and unlock secretsYour PIN and Windows Hello setup stay on the device that created them.
- Imported exportsSesame reads your imports on your computer and never uploads them.
On the Sesame website
- Account email and password hashThese exist only if you create an account. They let you sign in to the account portal and cannot open a vault.
- Support requests and linked desktopsThe website keeps what you send to support and a record of each desktop you link, and neither contains vault data.
- Product and release informationThe website publishes version numbers, download checksums, and the project status.
Read the source
The desktop app, browser extension, website, and optional server are licensed under AGPL-3.0-or-later.
What self-hosting covers
You can run the server, account portal, and admin interface yourself. Hosted Sync is planned as an optional paid service, but it is not available yet.
Commits in the last 30 days, counted 4 October 2026
- sesame-desktop The desktop app for Windows and Linux, including the Rust vault core. 470 commits Last push 4 October 2026
- sesame-server The Go server for accounts, the account portal, and the admin interface, which never sees a vault. 327 commits Last push 4 October 2026
- sesame-website This website and the scripts that build it. 59 commits Last push 3 October 2026
- sesame-browser-extension The browser extension for Chrome, Edge, and Firefox. 132 commits Last push 3 October 2026
Public beta
Try Sesame with test data
The release list saved with this site shows that version 0.2.5 was released on 16 September 2026 for Windows and Linux. Each release lists its SHA-256 checksums. Keep a separate backup of anything you cannot afford to lose.
In this beta
- Local vault
- Imports from other managers
- 2FA codes
- Security checks
- PIN unlock
- Windows Hello on Windows
- Encrypted backup and export
Not shipped yet
- Sync
- Mobile apps
- Passkeys
- Sharing
- Emergency access