Sesame is an open-source password manager that keeps your vault local by default. No account is needed to create or use a vault, and the hosted service never receives your vault data. The software is still early, and the independent security review is not yet complete, so the developer is seeking feedback and code review.

Currently, Sesame offers Windows desktop app, a vault-blind Go API server, a static website, and a browser extension for Chrome, Edge, and Firefox. The extension is packaged but not yet submitted to stores. Linux support is planned for a future release.

Key features include importing from other password managers, 2FA code storage, recovery details, security checkups, and the ability to self-host the server. The client-side encryption ensures your vault never reaches their servers, and there are no analytics or third-party scripts.

The project is AGPL-3.0-or-later licensed, with 147 commits in the last 30 days. The developer invites users to test the beta, review the code, and provide feedback to improve security and functionality.