Ente Auth stores TOTP codes with end-to-end encryption and syncs them across Android, iPhone, desktop, and the web. It comes from the same people as Ente Photos. You can keep codes on one device without an account. Sync means an account, and the codes are still encrypted with keys you hold. They have published audits. […]
KeePassXC can store TOTP secrets in the same encrypted database as your passwords. The browser extension can type the code. There is no second cloud and no second app from this team. The threat model matches the password vault: whoever can open the file can mint codes. That is also the downside. Password and second […]
Tresorit is end-to-end encrypted storage aimed at offices. It started in Hungary and is based in Switzerland. Swiss Post has owned it since 2021. Sharing, remote wipe, and admin controls are the product. The company publishes security writeups and has a history of outside tests. The design claim is that Tresorit cannot read the files. […]
Nextcloud is a self-hosted cloud: files, calendar, contacts, and a pile of apps, under the AGPL. You run it on a server you control, or you rent one. There is no Google in the middle unless you put one there. The files are not end-to-end encrypted by default. Whoever runs the server can read them. […]
Aegis is an open-source Android app for TOTP codes, the six-digit login codes that change every 30 seconds. The vault is encrypted on the phone. Backups can be encrypted and written to a file you store yourself. There is no Aegis cloud. Android only. If you lose the phone and the backup, you lose the […]
Proton Drive is end-to-end encrypted file storage from Proton in Switzerland. Files are encrypted before upload. Sharing is by link, with an optional password. The phone apps can back up photos. The same account can sit next to Proton Mail and VPN if you want one login. Free space is small. The desktop sync client […]
Vaultwarden is a community rewrite of the Bitwarden server, in Rust, small enough for a tiny computer at home. The official Bitwarden phone and browser apps talk to it. Your vault stays on hardware you can unplug. It is not Bitwarden’s server and it is not covered by Bitwarden’s audits. Features land when the volunteer […]
Bitwarden is an open-source password manager with apps on every platform and a company whose product is the vault. The database is encrypted on your devices before it syncs. Independent audits are published. The free tier covers unlimited passwords across devices. Paid adds a few sharing and emergency features. TOTP codes and passkeys live in […]
KeePassXC stores passwords in one encrypted file, a .kdbx database, on a disk you control. There is no account and no cloud. It runs on Windows, macOS, and Linux. Browser integration and TOTP codes are built in. The project is open source and is the maintained community client for the KeePass format. The KeePassXC team […]
Proton Pass is the password manager from Proton. Clients are open source. The vault is end-to-end encrypted. Hide-my-email aliases are built in, so a signup form gets a forwarding address instead of your real one. The free tier is enough to try it. Extra aliases and some comfort features sit on paid plans or the […]
BellCrier breach check
Most people are, and never hear about it. BellCrier checks your email against known data breaches for free, then alerts you when it turns up in a new one, with exactly what leaked and how to fix it.
