Hacker News: d0mkaaa

New comment by d0mkaaa in "Show HN: Sesame - a local-first, open-source password manager"

d0mkaaa — Fri, 28 Aug 2026 22:13:16 +0000

Yeah I can see what you mean, but it wasn't really intentional. I mainly wanted to avoid the usual black/blue security-product look. I will probably keep the general direction but give it more of its own identity over time. Thank you for sharing your opinion!

New comment by d0mkaaa in "Show HN: Sesame - a local-first, open-source password manager"

d0mkaaa — Fri, 28 Aug 2026 21:57:30 +0000

I don't really have anything against the big password managers either. I just don't love having to pay for a full year upfront with some of them. More than that though, a lot of them just don't quite fit what I want, or they feel a bit dated to use, like KeePassXC. That's a big part of why I started building Sesame. (and hoping to expand later on to have a more pleasurable ecosystem)

New comment by d0mkaaa in "Show HN: Sesame - a local-first, open-source password manager"

d0mkaaa — Fri, 28 Aug 2026 21:52:06 +0000

Yes. Every lock entry point (manual, auto-lock timer, app shutdown) funnels through one function, so the behavior can't drift, that calls lock_for_lifecycle, which drops the unlocked session. Dropping UnlockedVault zeroizes the 32-byte vault key and the whole in-memory payload in place before deallocation: names, logins, notes, cards, SSH keys, TOTP material, history, trash. Parsed import rows are wiped on lock too, and a session epoch is bumped so any pending browser fill approval dies with the lock! (also to mention it does not cover swap and hibernation files) ((also to mention I couldn't link the lines to mentioned functions but if you want to take a look, look at these lines: src-tauri/src/vault/mod.rs:78 sesame-core/src/lib.rs:197 sesame-core/src/lib.rs:225 types.rs:2184 ))

New comment by d0mkaaa in "Show HN: Sesame - a local-first, open-source password manager"

d0mkaaa — Fri, 28 Aug 2026 21:37:04 +0000

Passkeys will be added in the coming weeks

New comment by d0mkaaa in "Show HN: Sesame - a local-first, open-source password manager"

d0mkaaa — Fri, 28 Aug 2026 21:11:45 +0000

KeePassXC is definitely much more mature right now. I mean, Sesame is similar in being local-first and not requiring a cloud service, but I am aiming for a more modern consumer style experience. There is still a lot of work ahead to get it up to speed. I might also build more products around it eventually, so there’s a consistent ecosystem.

(and of course, it would be great to eventually surpass some of the existing projects :) )

New comment by d0mkaaa in "Show HN: Sesame - a local-first, open-source password manager"

d0mkaaa — Fri, 28 Aug 2026 19:44:17 +0000

vaultwarden + bitwarden is way more mature right now, but the main difference is that sesame is local-first by design. Vaultwarden also depends on staying compatible with bitwarden's clients/api, while this owns the whole stack

Show HN: Sesame - a local-first, open-source password manager

d0mkaaa — Fri, 28 Aug 2026 19:14:14 +0000

I have been working on Sesame, an open-source password manager that keeps your vault local by default. You don't need an account to create or use a vault, and the hosted service never receives the vault itself. It's still early software and the independent security review isn't finished yet, so I am mainly interested in feedback, testing, and people looking through the code.

(Linux support is yet to be released on v0.1.2, but currently is in the works.)

Comments URL: https://news.ycombinator.com/item?id=49483038

Points: 64

# Comments: 85