vaultura

A fully local, terminal-based password manager in Rust — XChaCha20-Poly1305 and Argon2id, a three-pane keyboard-driven UI, no network, no telemetry.

Rustpassword manager · tui · xchacha20 · argon2idhardware & securitysource on github

Why

A password manager where the data never leaves the machine: no cloud sync, no network access, no telemetry — with a keyboard-driven interface in the spirit of 1Password, in the terminal.

How

  • Layered ui → core → storage → crypto; the UI is Ratatui on crossterm. The crate is #![forbid(unsafe_code)].
  • The .vltr vault file is a small header — magic, version, 32-byte salt, KDF parameters, 24-byte nonce — followed by the bincode-serialized vault encrypted with XChaCha20-Poly1305. The 192-bit nonce makes random nonces safe.
  • The key comes from Argon2id (64 MiB, t=3, p=4 by default, tunable in config.toml). Secrets live in secrecy boxes and are zeroized.
  • Saves are atomic: write a temp file, fsync, rename.
  • The clipboard clears itself after 30 seconds; the vault auto-locks after 5 minutes idle. Multi-token search, a password generator and re-encrypted export.
brew tap zombocoder/vaultura https://github.com/zombocoder/vaultura.git
brew install vaultura
$ git clone https://github.com/zombocoder/vaultura
← all projects