OpenKey

Self-hosted end-to-end encrypted password manager autofill

OpenKey – Secure Password Manager & Autofill Manage website logins, passkeys, payment cards, and other sensitive information with local encryption, browser autofill, and self-hosted synchronization. Connect your browser directly to a server you operate or use the unlocked desktop app. A vendor-hosted vault is not required. BROWSER AUTOFILL - Find and fill saved usernames and passwords. - Select a login from the popup, on-page suggestions, or context menu. - Use a keyboard shortcut to fill a login. - Save new credentials after sign-in and update existing entries when account details change. - Review suggested changes before saving. Default shortcut - Windows and Linux: Ctrl + Shift + L - macOS: Command + Shift + L Change the shortcut in your browser’s keyboard settings if it conflicts with another command. PASSKEYS AND PAYMENT CARDS Use saved passkeys for compatible registration and sign-in flows. Supported actions are confirmed through the browser interface. You can choose the browser’s authenticator instead. Availability depends on the site, browser, and authentication flow. Store payment details and select a saved card to fill supported fields or copy information when needed. Forms vary, so manual entry may sometimes be required. Review all details before submitting a payment. MORE THAN LOGINS Supported item types also include cryptocurrency wallet information, developer secrets, other sensitive values, encrypted attachments, shared items, and organizational invitations. Available actions depend on the connection mode and connected client. ENCRYPTION AND PRIVACY Data is encrypted on your device before synchronization using AES-256-GCM. Your master password is not sent to the server in plaintext. A self-hosted deployment stores encrypted content rather than readable credentials. The service may process operational details, such as an account identifier and synchronization metadata. Zero-knowledge protection applies to stored content, not every type of metadata. The master password is essential. If you lose it and have no other unlocked device or usable backup, your data may be unrecoverable. Keep your credentials safe and maintain backups. CONNECTION OPTIONS 1. SELF-HOSTED SERVER - Enter your server URL in the browser settings. - Register or sign in with your account. - Unlock using your master password. - Synchronize encrypted data with your deployment. Your deployment must be reachable and correctly configured. HTTPS is recommended for production. 2. DESKTOP APP - Install and unlock the desktop application. - Enable browser integration in its settings. - Install and configure the native messaging host for your operating system and browser. - Select desktop connection mode. - Keep the app unlocked while using supported fill and save actions. Available features differ between connection modes. WEBSITE PERMISSIONS Access to sites is needed to detect supported login interactions, show fill options, enter credentials and payment details, and handle compatible passkey flows. Broad access is used because these actions may occur across many domains. The extension does not send the full HTML of pages you visit to an OpenSelfHosting vendor cloud. Autofill and saving are user-directed. Check the domain and selected information before proceeding. DOCUMENTATION AND SUPPORT Official website: https://openkey.openselfhosting.com/ Browser guide: https://openkey.openselfhosting.com/guide/extension Security and privacy: https://openkey.openselfhosting.com/privacy Downloads: https://openkey.openselfhosting.com/guide/download Developed by OpenSelfHosting, which builds software that gives users greater control over their data and tools. Your credentials. Your vault. Your control.