100% offline

You keep your
own secrets.

OwnKeep puts shell commands, logins and renewals one hotkey away — in a single encrypted file that never leaves your Mac.

Download for free git clone ownkeep

> cloud: none> telemetry: none> account: none> price: $0> macOS 13+

01 / SPECIFICATIONS

Built like a vault, not a service

STORAGE: one portable vault.dat file — move it, back it up, it's yours
CRYPTO: Argon2id key derivation + XChaCha20-Poly1305 AEAD
UNLOCK: master password or Touch ID; keys zeroized on lock
RECOVERY: 12-word Emergency Kit — shown once, works offline
CLIPBOARD: secrets copy as concealed, auto-clear after 30s
NETWORK: none. ever.

100% offline

No cloud, no sync servers, no account, no telemetry. Pull the Wi-Fi and nothing changes — everything already lives in one encrypted file on your disk.

Secure by construction

Argon2id and XChaCha20-Poly1305, from audited Rust crates — no hand-rolled crypto. Your master password is never stored, and secrets never reach the UI layer. OwnKeep itself has had no third-party audit; SECURITY.md sets out the full construction and its limits.

Keyboard-first

A menu-bar app summoned with ⌘⇧Space from anywhere. Search, copy, done — then it gets out of your way. No window to manage.

OwnKeep lock screen with master password and Touch ID

one door in: master password, Touch ID, or your recovery code

Touch ID is a shortcut — never a replacement for your keys

02 / MODULES

Everything worth keeping, one file

vault/

└─ calendar, bookmarks …soon

Logins with categories and sortable columns. One keystroke copies a username or password as concealed clipboard data, so history tools never see it. Full-text search, CJK included.

03 / COMMAND BAR

Three letters. A number. Done.

Press ⌘⇧Space in any app and a Spotlight-style bar appears. Results rank by what you actually use, not alphabetically. Hit a number and it's on your clipboard — concealed from clipboard managers, auto-cleared in 30 seconds.

Commands can carry {{placeholder}} markers. Pick one and OwnKeep asks for the values, then copies the finished line — so a placeholder in the middle works as well as one at the end.

⌘⇧Space: summon the command bar
⌘⇧D: toggle the Dashboard window
⌥⇧1–9: run a result's primary action
⌥⌘1–9: copy a command's raw template
⌘H: keyboard-shortcut cheat sheet
Esc: gone — hides on blur too

OwnKeep command bar searching git commands

04 / MADE FOR DAILY USE

Fast, themeable, yours to shape

HOTKEYS

Bound the way you think

Every global and Dashboard shortcut is yours to remap in Settings.

THEMING

Light, dark, or follow the system

Pick your own accent colour too. Applied live — nothing to restart.

PERFORMANCE

Opens before you finish the shortcut

A native Tauri app with a Rust core — 12 MB, not a bundled browser.

CUSTOMIZABLE

Only the modules you want

Switch any module off and it leaves the bar and sidebar — data kept.

OwnKeep settings — modules, hotkeys, categories and tags

OwnKeep system settings — security, vault file, backup and Emergency Kit

Open source, auditable

Don't trust — verify. The crypto is a few hundred readable lines of Rust.

Licensed GPL-3.0 — yours to read, build and fork

github.com/ownkeep-app/ownkeep →

05 / PRICING

Free now. Local forever.

NOW

$0Free

✓ The whole app — every module, no limits✓ Encryption, Touch ID, Emergency Kit✓ Command bar, global hotkey, Dashboard✓ Backup, restore and safe upgrades✓ No account, no trial, no card

Download for free

LATER

Procoming soon

· Optional extras, if and when they arrive· Candidates: calendar, lists, bookmarks· Everything listed under Free stays free· Still no account, still no cloud

watch the repo →

06 / FAQ

Questions, answered

07 / ABOUT

Built by one person who wanted this to exist

OwnKeep started with a small annoyance: my passwords had a home, and everything else I couldn't afford to lose didn't. It's built with Tauri 2 and a Rust core, held to a 95% test-coverage gate on both sides, and shipped as a plain signed .dmg — no installer, no account, no runtime that phones home. Upgrades never touch your vault: the file lives outside the app, and any change to its shape shows you a migration guide before a single byte is written.

Questions, bug reports, or a module you wish existed? Write to me: caishaojiang@gmail.com

ownkeep.app · github.com/ownkeep-app/ownkeep · macOS 13+