

OxidVault
OxidVault is an offline-first, zero-knowledge password and secrets manager built for small and medium businesses that need on-premise credential management without cloud dependency. Written in Rust and Tauri v2, it combines a memory-safe backend with a lean desktop UI.
Cost / License
- Freemium (Subscription)
- Open Source (AGPL-3.0)
Application type
Platforms
- Windows
- Google Chrome
Features
Properties
- Privacy focused
Features
- No Tracking
- Works Offline
- Time-based One-time Password
- AES-256 Encryption
- Multiple Account support
- Encrypted Backup
- Dark Mode
- Ad-free
- Portable
- End-to-End Encryption
- Password Sharing
- Rust
- Offline
OxidVault News & Activities
Recent activities
OxidVault information
What is OxidVault?
OxidVault is an offline-first, zero-knowledge password and secrets manager built for small and medium businesses that need on-premise credential management without cloud dependency. Written in Rust and Tauri v2, it combines a memory-safe backend with a lean desktop UI.
Key features:
- Zero-knowledge architecture — master password and secrets never leave the Rust core; plaintext is not persisted in the UI layer
- Multi-user vaults (up to 5 users on Community Edition) with per-user password and TOTP-based MFA, shared DEK architecture
- AES-256-GCM encryption, Argon2id key derivation (128 MiB default, admin-configurable)
- ISO 27001-aligned audit logging with SHA-256 hash chain + HMAC checkpoints, JSON/CSV/PDF export
- Vault files (.oxid) can live locally or on network shares (UNC paths) — ideal for centralized team vaults
- SSH Quick Connect with integrated terminal and host key verification (TOFU)
- Browser extension (Chrome/Edge) for controlled autofill via native messaging — no cloud sync involved
- Admin policy file (GPO-style) for centrally enforced password rules, auto-lock, and KDF parameters
- Extensively fuzz-tested parsers (cargo-fuzz/libFuzzer): 1.28+ billion runs on the vault file parser alone, zero crashes
Community Edition is free and open source (AGPLv3). An Enterprise Edition adds unlimited users, LDAP/SSO, and priority support.
Currently available for Windows; Linux support is under community interest evaluation.






