nyxora 3.1.1

Your passwords. Your machine. No cloud. No compromise.

Nyxora is an offline password manager that runs entirely in your terminal. Your vault is stored on your machine, encrypted with military-grade cryptography — nothing ever leaves it. No accounts. No cloud. No subscriptions.

Preview

nyx tui — interactive vault browser with live TOTP codes, strength ratings, and instant search

Install

Recommended — works on Windows and Linux:

pipx install nyxora

Standard pip:

pip install nyxora

Windows — no Python required:

Download nyx.exe from the latest release and run it from any terminal.

Quick Start

# 1. Create your vault (one time only)
nyx vault init

# 2. Unlock it
nyx vault unlock

# 3. Add a password
nyx secret add -t "GitHub" -u "your-username" --generate

# 4. Open the interactive browser
nyx tui

That's it. Your vault is encrypted and stored locally at ~/.nyxora/vault.nyx.

What can Nyxora do?

Commands

Vault

nyx vault init              # create a new vault
nyx vault unlock            # unlock your vault
nyx vault lock              # lock and wipe session
nyx vault status            # show vault status
nyx vault change-password   # change master password
nyx vault panic             # emergency wipe — destroys session immediately
nyx vault profiles          # manage multiple vaults
nyx vault import            # import from CSV, JSON, Bitwarden, or 1Password

Secrets

nyx secret add              # add a new entry
nyx secret list             # list all entries
nyx secret get "GitHub"     # get an entry by title
nyx secret get "GitHub" --copy   # copy password to clipboard
nyx secret update "GitHub"  # update an entry
nyx secret delete "GitHub"  # delete an entry
nyx secret totp "GitHub"    # show live TOTP code
nyx secret clone "GitHub"   # duplicate an entry
nyx secret search "git"     # search by title, username, or URL

Generate

nyx generate password                        # random password
nyx generate password --length 32            # custom length
nyx generate password --min-strength strong  # enforce strength
nyx generate passphrase --words 6            # diceware passphrase
nyx generate api-key --prefix NYX            # API key with prefix
nyx generate entropy "hunter2"              # analyse any password

Security

nyx security audit          # full vault audit
nyx security audit --no-hibp    # skip breach check
nyx security health         # vault health score (0–100)
nyx security due            # passwords overdue for rotation
nyx security log            # audit event history
nyx security forensic       # full integrity verification

Scripting

# Pipe a password to a command's stdin
nyx script pipe "GitHub" -- some-command

# Inject credentials as environment variables
nyx script run "AWS" -- aws s3 ls

# Fuzzy-find entries (requires fzf)
nyx script fzf --copy

# Machine-readable output
nyx --json secret list
nyx --json vault status

Other

nyx backup create / list / verify / restore   # vault backups
nyx locker encrypt <file>                     # encrypt any file
nyx recovery status                           # check recovery setup
nyx update check / install / rollback         # manage updates
nyx tui                                       # interactive browser

Security

Nyxora is designed to keep your passwords secure even if your machine is compromised:

• Argon2id key derivation — memory-hard, resistant to brute force
• XChaCha20-Poly1305 encryption — authenticated, tamper-evident
• Per-entry HMAC integrity checks — detects any modification
• Memory locking — prevents keys from being swapped to disk
• Zero plaintext on disk — every field is encrypted before storage
• Offline by default — no network access except optional HIBP breach checks

Read SECURITY.md for the full security policy and responsible disclosure process.

Python SDK

from nyxora import VaultClient

with VaultClient(vault_path="~/.nyxora/vault.nyx",
                 password="your-master-password") as client:
    entry = client.get("GitHub")
    print(entry.password)

    totp_code = client.get_totp("GitHub")
    score = client.health()
    print(f"Vault health: {score.grade} ({score.total}/100)")

Requirements

• Python 3.12 or later (not needed for Windows .exe)
• Windows 10+ or Linux
• macOS — works but not officially tested

Contributing

Pull requests are welcome. See CONTRIBUTING.md for guidelines.