YOUR KEYS.
YOUR PRIVACY.
YOUR CONTROL.
A modern, open-source password manager designed to protect your digital life. Store, organize, and auto-fill your passwords, payment cards, and two-factor codes securely on your devices—with seamless cloud sync, zero subscriptions, and zero tracking.
Your vault is encrypted before it ever leaves your device. Only you possess the master key.
GitHub Account
alex.developer@work.com
Google Workspace
alexander@company.com
Spotify Family
alex.music@gmail.com
Structured Archetypes & Custom Attributes.
KeyNest structures entries into dedicated schemas for logins, payment cards, encrypted notes, and server infrastructure while preserving standard KDBX XML DOM compatibility.
Domain Normalization & Native System Autofill.
KeyNest uses the Mozilla Public Suffix List to compute eTLD+1 domain boundaries, blocking lookalike phishing attempts. Credential matching powers the Android AutofillService plugin and Apple Credential Provider extension directly.
Your Data Stays Yours. Always.
Engineered from the ground up to ensure complete confidentiality, total data ownership, and zero reliance on corporate password servers.
Zero-Knowledge Encryption
Your vault is encrypted directly on your device before it ever touches storage. Neither cloud providers nor third parties can ever see or read your passwords.
Open KeePass Standard
Your data is stored in standard KeePass (.kdbx) format. You retain total ownership of your files, with the freedom to back up, migrate, or open them in compatible desktop apps anytime.
Your Cloud, Your Choice
Synchronize your encrypted vault seamlessly across devices using Google Drive, Dropbox, or your own private Nextcloud server. No mandatory proprietary accounts required.
Built-in 2FA Authenticator
Generate time-based 6-digit verification codes with animated countdown progress rings. Eliminates the need for separate authenticator apps like Google Authenticator.
Zero Trackers or Telemetry
KeyNest contains no behavioral analytics, no advertising trackers, and no data harvesting. It is 100% free and open-source software distributed under the GPL-3.0 license.
Multi-Vault Organization
Keep your life organized by maintaining separate, isolated vaults for personal logins, work infrastructure, and family accounts—all accessible from a single unified view.
Deterministic 3-Way Cloud Merge.
Synchronize seamlessly with Google Drive, Dropbox, or your own Nextcloud (WebDAV) server. Concurrent offline edits reconcile without generating conflicting file clones.
Last synchronized cryptographic state
Both client nodes share the identical remote ETag and KdbxTree root object hash prior to going offline.
Entry UUID: 7e2a... // Password: "Alpha123!"
User Data Transparency: Google Drive & Cloud Vault Sync
KeyNest requests access to Google Drive strictly to read and write your user-designated KeePass (.kdbx) vault database. Your database is encrypted client-side using Argon2id before leaving your device. KeyNest operates with zero telemetry, maintains no intermediary servers, and never accesses, inspects, shares, or sells your Google user data or personal drive files.
Auditing & Cryptographic Entropy.
KeyNest actively audits your database for credential reuse, low Shannon entropy, and missing 2FA without exposing plaintext secrets to third-party endpoints.
Database Health Score: 84 / 100
Identifies identical password hashes across multiple domains without exposing plaintext strings in memory.
Evaluates Shannon entropy bits. Recommends rotating keys that fail computational complexity thresholds.
Flags high-value services that support RFC 6238 one-time tokens but lack attached TOTP seeds.
Automated Ingestion From Legacy Vaults.
Import from Bitwarden, 1Password, KeePass XML, or browser CSVs with schema normalization. Move credentials into zero-knowledge KDBX 4.1 in seconds.
Ingestion: Bitwarden Format
In your Bitwarden Vault, navigate to Tools → Export Vault.
Select JSON or CSV export format.
In KeyNest, launch the CSV Import Mapper from the Vault menu.
Custom fields, attachments, and TOTP seeds map directly into KDBX archetypes.
Download KeyNest.
Free and open-source software distributed under the GNU General Public License v3.0. No subscription fees, no accounts, and no paid tiers.
Android
Android 8.0 (API 26) or higher
Direct APK and app bundle with system autofill, biometric unlock, and offline storage access.
Windows Desktop
Windows 10 / Windows 11 (64-bit)
Desktop installer and portable standalone binary. Windows Hello biometrics and full offline KDBX editing.
Linux Desktop
Ubuntu, Debian, Fedora (GTK3)
Native desktop package with system keyring integration, Wayland support, and local vault sync.
Web App (PWA)
Modern Web Browsers
Client-side Progressive Web App running in-browser encryption for cross-device access.
Apple iOS & macOS
iOS 15.0+ / macOS 11.0+
Credential provider extension for Safari and native apps, with Face ID and Touch ID support.
Official GitHub Releases
Download verified Android APKs and Windows Beta packages directly from the release page.
Technical Architecture FAQ.
Detailed specifications on KDBX 4.1 compliance, memory hardening, and deterministic synchronization.