Okkey

Self-hosted password manager: client-side vault, Q-day ready crypto, secure autofill.

Okkey is a self-hosted password manager built for maximum client-side protection — including cryptography designed with a post-quantum (Q-day) threat model in mind. You run Okkey on your own infrastructure. The browser extension connects to the Okkey instance URL you configure (self-hosted or local). Your vault syncs with your server, and decryption happens on your device. Why Okkey • Client-side vault — secrets are decrypted in the extension, not on the server • Post-quantum ready crypto — engineered for long-term confidentiality as quantum threats emerge • Self-host first — bring your own Okkey deployment; you control where encrypted data lives • Autofill done right — fill saved records of any type (logins, passwords, TOTP, and other fields), with save/update prompts and per-URL scopes (entire site / exact URL / never) • Trusted devices — the extension registers as a device and waits for approval from a device you already trust • Local unlock — master password, optional PIN, or biometrics unlock the vault only inside the extension after sign-in How sign-in works 1. Enter your Okkey web base URL 2. Sign in through your instance’s web login — SSO/2FA stay on the web app 3. Approve the new extension device from a trusted device 4. Unlock locally and autofill on the sites you choose Privacy & permissions Okkey needs access to websites you visit only to detect login forms and autofill credentials you saved. We do not sell browsing data and we do not run remote code. See the privacy policy linked on this listing and the open-source repository for details. Open source core: https://github.com/okkeyapp/okkey