A serverless password manager that stores your encrypted vault on S3-compatible storage you control.
Your vault is a single encrypted file on S3-compatible storage you control. No proprietary server, no subscription.
AES-256-GCM encryption with Argon2id key derivation. All cryptography happens on your device — keys never leave it.
Desktop (Windows, macOS, Linux), Android, and browser extensions — all sharing the same Rust core library.
Use AWS S3, Cloudflare R2, MinIO, or any S3-compatible storage. Switch providers anytime — your data is yours.
Fully open-source under Apache 2.0. Audit the code, build from source, contribute — it's all yours.
Your master password derives encryption keys via Argon2id. Data is encrypted with AES-256-GCM before leaving your device.
Your entire vault is one JSON file. No database, no server infrastructure. Simple, portable, and easy to back up.
The same vault-core library compiles to native code, JNI, and WebAssembly. Identical behavior across all platforms.
kura has not reached its first stable release yet. Use at your own risk.
Download kura for your platform from the links above.
Configure your S3-compatible storage — AWS S3, Cloudflare R2, or MinIO.
Create your master password and start storing credentials securely.