Rowel

Keep every password, passkey, card, ID, SSH key and `.env` file and more in one encrypted vault on your own devices. No account, no server, no subscription.

Free and open source for macOS, Windows, Linux and iOS. Sync is optional and goes through your own Google Drive, Dropbox, or iCloud, which only ever stores ciphertext.

Get started

• Open Rowel and choose Start fresh. If you already use Rowel on another device, pick Continue with Google Drive or Restore from a backup file (.rowel) instead.
• Choose a master password and type it a second time. On supported devices you can then turn on Touch ID / Face ID.
• Bring your items in: go to Settings → Import and drop in an export from your old password manager or browser. Or add your first login, card or SSH key by hand.
• Optional: connect Google Drive in Settings to keep your devices in sync.

Why Rowel

• No account, no backend. Your vault is encrypted files on your own disk, and it works fully offline. There's nothing to sign up for and no server that could be breached.
• Built for developers. SSH keys (with fingerprint randomart), API keys with environment and scopes, and whole .env files are their own item types, not notes you've pasted in.
• Switch in a few clicks. Move in from 1Password, LastPass, Bitwarden, KeePass, Enpass, Chrome or Safari. Point Rowel at your export and it brings your items over, with a report for anything it couldn't import.
• Bring your own cloud. Each lockbox syncs to your Google Drive as one encrypted file, and Rowel can only see the folder it creates. Edits from different devices merge on their own, without conflicts.
• Encrypted even while open. The vault is encrypted on disk, and each item's secrets are sealed a second time, so they're decrypted only at the moment you reveal or copy them.
• Lockboxes. Keep Personal, Family, Work or per-client compartments, each in its own encrypted file, all opened with one master password.
• Private sharing by link. Share one item through an encrypted link that expires in 24 hours and can be revoked. The key lives only in the link.
• Scan to fill. Take a photo of a card or passport and Rowel reads it on your device to fill in the fields. Nothing gets uploaded.