Goldfish

Goldfish is a password manager that keeps everything on your own computer. No cloud, no account, no subscription — your vault is a single encrypted file and only you hold the key.

Defence in depth. Your master password goes through Argon2id, every entry is encrypted on its own with XChaCha20-Poly1305 and the whole database additionally sits in SQLCipher.

• Passwords, cards, notes, SSH keys, API tokens and TOTP — entries in folders and with tags, attachments and one-time codes for two-factor authentication
• Password and passphrase generator with a strength estimate
• Breached password check — anonymously against Have I Been Pwned; your password never leaves your computer
• Vault health — weak, reused, breached and old passwords in one place
• Biometric unlock — Windows Hello (fingerprint, face, PIN)
• Auto-lock and clipboard clearing — the vault locks after inactivity and a copied password disappears from the clipboard
• Import from Bitwarden, KeePassXC and 1Password, encrypted export, backups and a recovery code
• Automatic updates, Czech / English / German, light and dark theme