Trynta

A local-first, end-to-end encrypted password manager for the desktop. Your vault is one file on your own disk, and the key that opens it is derived on your machine and kept nowhere else — not on a server, because there isn't one.

Download for Windows Read the source

Pre-1.0. No third-party security audit yet. Windows only. Don’t put credentials you rely on in it.

Trynta 0.1.0 on Windows 11. Every brand mark on this screen was drawn from the application’s own files — rendering it made no network request. The vault is synthetic: those addresses are on a reserved domain that cannot resolve.

Specification

Ten properties, each naming the file to read if you would rather check than take our word for it. Four of them say none, unsigned or Windows only. Those are the ones worth opening first.

Download

Version 0.1.0. Every artefact is built by the release workflow from a tagged commit, and the SHA-256 of each is listed on the release page.

Windows Available

Windows 10 build 1809 or later · x64 · WebView2 runtime. The .exe installs for you alone and asks for no administrator prompt; the .msi is there if you are deploying it.

.msi for deployment Download .exe

macOS Next up

Being worked on. The macOS code is written — Touch ID, the Keychain, the window chrome — and it built and passed the full test gate once, back in August. Proving it still does needs a Mac to run it on, and until there is one we would rather hand you nothing than hand you a build nobody has opened. It is the next platform, not an afterthought.

Not yet

Linux Not started

Honestly: not started. Rust and Tauri both run there, so the ground is not hostile, but the parts that matter are per-platform — the secret store, the biometric unlock, the clipboard — and none of that is written. We would like to. If you want it, an issue saying so is the thing that moves it up the list.

Not yet

All releases — older versions, the full notes, and source archives.

What Windows will say

The installer is unsigned, so SmartScreen shows a blue dialog reading Windows protected your PC with the publisher listed as Unknown publisher. Getting past it takes More info → Run anyway.

That warning is accurate and you should not wave it away on our say-so. Run Get-FileHash over what you downloaded and compare it with the SHA-256 on the release page — the button above hands you the file without taking you past them. A certificate is on the list, behind things that matter more.

Release notes →

Roadmap

Shipped

V1 · The local vault

Logins, secure notes, cards and identities in an encrypted local file. A generator with a real entropy figure, one-time codes, a report that finds weak, reused and breached passwords, encrypted backups under their own passphrase, and unlock with Windows Hello. This is what you can download today.

V2 · Multi-owner credentials

Two people co-owning one login through a mutually confirmed invite: both see it, both can use it, both can edit it, and neither depends on the other staying online. Item keys wrapped to each owner’s public key, so nothing in the middle ever holds plaintext. The keypair is generated and reserved. None of the rest is written.

Further out

V3 · Sync and autofill

Optional end-to-end encrypted sync through a relay you can run yourself, and browser autofill that matches on the registrable domain rather than a substring. Both depend on the V2 key exchange existing first, so neither has a shape yet.

No dates. This is worked on in evenings, and a date would be a guess dressed up as a commitment.

Changelog

Full changelog → Documentation →

0.1.0 Latest 2026-08-22

Added

Logins, secure notes, cards and identities in an encrypted local vault, with multiple vaults that can be renamed and recoloured.

Added

Unlock with a master password derived by Argon2id, with exponential backoff that survives a restart. There is no wipe-after-N-failures — it is too easily turned into a denial of service by somebody who has your file.

Added

Unlock with Windows Hello, off by default. Your master password is still required every fourteen days, so losing the biometric never means losing the vault.

Added

Copying a password decrypts it in Rust and writes the system clipboard directly. The value never enters the webview that draws the interface, and the clipboard is cleared after thirty seconds — only if what is on it is still what Trynta put there.

Added

Revealing a secret is the one path a plaintext takes to the interface: one field, one item, on an explicit action, rate-limited to twenty a minute.

Added

A password and passphrase generator built on the operating system's random source with rejection sampling, reporting the entropy it actually produced rather than a bar with a colour. The passphrase wordlist is the EFF long list, vendored and verified by hash.

15 more in the full changelog, including what this release cannot do.