Skip to main content

Secure Command-Line Password Manager

Project description

Keepr Logo

Keepr: A lightweight, end-to-end encrypted password manager for developers - built for the terminal.


PyPI Version MIT License PyPI Downloads Built with Python3 License badge GitHub stars

Keepr is a secure, cross-platform command-line password manager designed for software developers. It stores your credentials in an encrypted SQLCipher database that lives entirely on your local machine, ensuring complete control over your data. No servers, no cloud syncing — just strong, local encryption.

The vault is protected by a Master Password derived into a strong encryption key using an industry-standard PBKDF2-HMAC key derivation function (SHA256, 1.2M iterations). Your data remains safe even if the database or key files are compromised.


🧠 Why Keepr?

As a developer, you constantly handle sensitive data — API keys, repository tokens, SSH passwords, and configuration secrets. Keepr was built to simplify that workflow by letting you store, search, and retrieve secrets directly from the terminal, without switching tools or exposing plaintext data.


📑 Official Docs

Visit the official docs for installation instructions, user guides, deep dives into Keepr's encryption or a full command reference.

👉 Full documentation


⚡ Quick Start

Install Keepr from PyPI:

pip install keepr

keepr login # Set or unlock the master password

keepr add github # Add a credential

keepr view github # Retrieve entry securely

That’s it — your credentials are stored locally, fully encrypted, and accessible only through your master key.


🧩 Features at a Glance

  • 🔒 End-to-End Encryption — AES-256 via SQLCipher and Fernet.
  • 🔑 Master Password — Derives a Key Encryption Key (KEK) with PBKDF2-HMAC.
  • 🕒 Timed Sessions — Stay logged in for convenience, auto-lock after expiry.
  • 🧭 Vault Management — Add, update, list, search, or delete credentials.
  • 🧰 Password Generator — Cryptographically secure, configurable length.
  • 🧼 Clipboard Copy — Automatically copy passwords to the clipboard when viewing an entry.
  • 🎨 Custom Color Scheme — Clear, high-contrast terminal output.
  • ⚙️ User configuration — Configure the session length, the terminal output color scheme and password generator settings.

📦 Installation

Keepr supports macOS, Linux, and Windows.

Install from PyPI:

pip install keepr

Or download standalone binaries from the github releases page.

For full installation instructions read the docs guide.


🛡️ Security at a Glance

Keepr uses a two-key encryption system:

  • KEK (Key Encryption Key) — derived from your Master Password
  • PEK (Primary Encryption Key) — encrypts the SQLCipher vault
  • The PEK is stored only in encrypted form; the KEK is never written to disk.

Read about the full encryption architecture in the docs.


🤝 Contributing

Contributions, ideas, and bug reports are welcome.

Please open an issue before submitting major changes.


👨‍🔧 Support

If you run into problems, the best way to get help is through the GitHub issue tracker.

  • 🐛 Bug Reports:
    Tag the issue with the bug label and include steps to reproduce.

  • 💡 Feature Requests:
    Use the enhancement label and describe what you’d like to see added or improved.

  • General Questions:
    Feel free to open an issue or reach out directly to the maintainers.


🗺 Roadmap

Planned future features and improvements:

  • ⌨️ Shell autocompletion for Keepr commands and arguments.
  • 🧪 Password strength checks.
  • 🧵 Bulk import/export of entries.
  • 🔄 A copy command, which copies a password for an entry to the clipboard, without displaying any info on screen.
  • 🧩 A generate command, which just generates a password and displays it on screen (separate to the -g option for the add command).
  • 🛡️ Optional Two-factor authentication.

If you want to help shape the roadmap, feel free to open an issue or submit proposals.


👤 Authors


📜 License

Keepr is offered under the MIT License. See LICENSE.md for full details.

You are free to use, modify, and distribute the software as long as the license terms are respected.


🚀 Project Status

Active development

New features, performance improvements, and security enhancements are added regularly. Community feedback is always appreciated, and contributions are welcome!

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

keepr-1.1.2.tar.gz (13.0 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

keepr-1.1.2-py3-none-any.whl (16.9 kB view details)

Uploaded Python 3

File details

Details for the file keepr-1.1.2.tar.gz.

File metadata

  • Download URL: keepr-1.1.2.tar.gz
  • Upload date:
  • Size: 13.0 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/6.1.0 CPython/3.13.7

File hashes

Hashes for keepr-1.1.2.tar.gz
Algorithm Hash digest
SHA256 26b2118f2b68afc071ee9ae4f5c9e2ef209ba23e8c7b292e8ad9a112dd73caf1
MD5 e71149faa6e671641fe807b84c827f1c
BLAKE2b-256 97fb8adc47bcd63ed649db4c034cf940a34bb6c5976dfd1bd0a96235e3134b77

See more details on using hashes here.

Provenance

The following attestation bundles were made for keepr-1.1.2.tar.gz:

Publisher: publish_to_pypi.yml on bsamarji/Keepr

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file keepr-1.1.2-py3-none-any.whl.

File metadata

  • Download URL: keepr-1.1.2-py3-none-any.whl
  • Upload date:
  • Size: 16.9 kB
  • Tags: Python 3
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/6.1.0 CPython/3.13.7

File hashes

Hashes for keepr-1.1.2-py3-none-any.whl
Algorithm Hash digest
SHA256 e5d4858b5ae1eeec52a3ea74a85d621e88da6e6e538c579e0bff0ac8b7e790e0
MD5 2e7dbd2db9c5ca10eaa2f0a1da983790
BLAKE2b-256 433486a189c415c6ccb24d27da89215e4df6a981f135861c4e4ee0866a72dcf7

See more details on using hashes here.

Provenance

The following attestation bundles were made for keepr-1.1.2-py3-none-any.whl:

Publisher: publish_to_pypi.yml on bsamarji/Keepr

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page