Skip to main content

Secure Command-Line Password Manager

Project description

Keepr Logo

Keepr: A lightweight, end-to-end encrypted password manager for developers - built for the terminal.


PyPI Version MIT License PyPI Downloads Built with Python3 License badge GitHub stars

Keepr is a secure, cross-platform command-line password manager designed for software developers. It stores your credentials in an encrypted SQLCipher database that lives entirely on your local machine, ensuring complete control over your data. No servers, no cloud syncing — just strong, local encryption.

The vault is protected by a Master Password derived into a strong encryption key using an industry-standard PBKDF2-HMAC key derivation function (SHA256, 1.2M iterations). Your data remains safe even if the database or key files are compromised.


🧠 Why Keepr?

As a developer, you constantly handle sensitive data — API keys, repository tokens, SSH passwords, and configuration secrets. Keepr was built to simplify that workflow by letting you store, search, and retrieve secrets directly from the terminal, without switching tools or exposing plaintext data.


📑 Official Docs

Visit the official docs for installation instructions, user guides, deep dives into Keepr's encryption or a full command reference.

👉 Full documentation


⚡ Quick Start

Install Keepr from PyPI:

pip install keepr

keepr login # Set or unlock the master password

keepr add github # Add a credential

keepr view github # Retrieve entry securely

That’s it — your credentials are stored locally, fully encrypted, and accessible only through your master key.


🧩 Features at a Glance

  • 🔒 End-to-End Encryption — AES-256 via SQLCipher and Fernet.
  • 🔑 Master Password — Derives a Key Encryption Key (KEK) with PBKDF2-HMAC.
  • 🕒 Timed Sessions — Stay logged in for convenience, auto-lock after expiry.
  • 🧭 Vault Management — Add, update, list, search, or delete credentials.
  • 🧰 Password Generator — Cryptographically secure, configurable length.
  • 🧼 Clipboard Copy — Automatically copy passwords to the clipboard when viewing an entry.
  • 🎨 Custom Color Scheme — Clear, high-contrast terminal output.
  • ⚙️ User configuration — Configure the session length, the terminal output color scheme and password generator settings.

📦 Installation

Keepr supports macOS, Linux, and Windows.

Install from PyPI:

pip install keepr

Or download standalone binaries from the github releases page.

For full installation instructions read the docs guide.


🛡️ Security at a Glance

Keepr uses a two-key encryption system:

  • KEK (Key Encryption Key) — derived from your Master Password
  • PEK (Primary Encryption Key) — encrypts the SQLCipher vault
  • The PEK is stored only in encrypted form; the KEK is never written to disk.

Read about the full encryption architecture in the docs.


🤝 Contributing

Contributions, ideas, and bug reports are welcome.

Please open an issue before submitting major changes.


👨‍🔧 Support

If you run into problems, the best way to get help is through the GitHub issue tracker.

  • 🐛 Bug Reports:
    Tag the issue with the bug label and include steps to reproduce.

  • 💡 Feature Requests:
    Use the enhancement label and describe what you’d like to see added or improved.

  • General Questions:
    Feel free to open an issue or reach out directly to the maintainers.


🗺 Roadmap

Planned future features and improvements:

  • ⌨️ Shell autocompletion for Keepr commands and arguments.
  • 🧪 Password strength checks.
  • 🧵 Bulk import/export of entries.
  • 🔄 A copy command, which copies a password for an entry to the clipboard, without displaying any info on screen.
  • 🧩 A generate command, which just generates a password and displays it on screen (separate to the -g option for the add command).
  • 🛡️ Optional Two-factor authentication.

If you want to help shape the roadmap, feel free to open an issue or submit proposals.


👤 Authors


📜 License

Keepr is offered under the MIT License. See LICENSE.md for full details.

You are free to use, modify, and distribute the software as long as the license terms are respected.


🚀 Project Status

Active development

New features, performance improvements, and security enhancements are added regularly. Community feedback is always appreciated, and contributions are welcome!

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

keepr-1.1.3.tar.gz (13.0 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

keepr-1.1.3-py3-none-any.whl (16.9 kB view details)

Uploaded Python 3

File details

Details for the file keepr-1.1.3.tar.gz.

File metadata

  • Download URL: keepr-1.1.3.tar.gz
  • Upload date:
  • Size: 13.0 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/6.1.0 CPython/3.13.7

File hashes

Hashes for keepr-1.1.3.tar.gz
Algorithm Hash digest
SHA256 c1436a740031992bbfec5b30f6678a586f8050542a80c0fb58020b58ce441562
MD5 3d4638a8323c82f5588d6067aa8b9015
BLAKE2b-256 7149e956c925c8e642ff6bbe1103fe741fc5a1049ffd576cfa1743932e0bd161

See more details on using hashes here.

Provenance

The following attestation bundles were made for keepr-1.1.3.tar.gz:

Publisher: publish_to_pypi.yml on bsamarji/Keepr

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file keepr-1.1.3-py3-none-any.whl.

File metadata

  • Download URL: keepr-1.1.3-py3-none-any.whl
  • Upload date:
  • Size: 16.9 kB
  • Tags: Python 3
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/6.1.0 CPython/3.13.7

File hashes

Hashes for keepr-1.1.3-py3-none-any.whl
Algorithm Hash digest
SHA256 fb1edf15914118453fc7eb3c386f389e7487cbddd30bb749ccbbbc7237602588
MD5 c7bd61067316b8aabeac1a4308faaf41
BLAKE2b-256 a051c8844275282628984035d6279738bc4e7725c24b6738384b0b007b60ff4a

See more details on using hashes here.

Provenance

The following attestation bundles were made for keepr-1.1.3-py3-none-any.whl:

Publisher: publish_to_pypi.yml on bsamarji/Keepr

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page