Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Show HN: Sesame - a local-first, open-source password manager

usesesame.app

Post reply on HN
Print view View original

11–20 of 88 posts

Re: Show HN: Sesame - a local-first, open-source password manager

#11

Post by d0mkaaa »

konaraddi wrote: post #6

Does it purge passwords from memory on vault lock?

Yes. Every lock entry point (manual, auto-lock timer, app shutdown) funnels through one function, so the behavior can't drift, that calls lock_for_lifecycle, which drops the unlocked session. Dropping UnlockedVault zeroizes the 32-byte vault key and the whole in-memory payload in place before deallocation: names, logins, notes, cards, SSH keys, TOTP material, history, trash. Parsed import rows are wiped on lock too, and a session epoch is bumped so any pending browser fill approval dies with the lock! (also to mention it does not cover swap and hibernation files) ((also to mention I couldn't link the lines to mentioned functions but if you want to take a look, look at these lines: src-tauri/src/vault/mod.rs:78 sesame-core/src/lib.rs:197 sesame-core/src/lib.rs:225 types.rs:2184 ))

Re: Show HN: Sesame - a local-first, open-source password manager

#12

Post by d0mkaaa »

arlattimore wrote: post #7

I like that this could be self hosted. I don't have anything against the big password managers (I use and pay for one), but they are a massive target for hackers for obvious reasons. If everyone could self host their own vault on a personal domain, the reward for hackers is much more difficult to get access to.

I don't really have anything against the big password managers either. I just don't love having to pay for a full year upfront with some of them. More than that though, a lot of them just don't quite fit what I want, or they feel a bit dated to use, like KeePassXC. That's a big part of why I started building Sesame. (and hoping to expand later on to have a more pleasurable ecosystem)

Re: Show HN: Sesame - a local-first, open-source password manager

#16

Post by d0mkaaa »

majorchord wrote: post #13

No offense but you might want to consider a different styling for the app/site because IMO this one screams "Claude vibe-code style".

Yeah I can see what you mean, but it wasn't really intentional. I mainly wanted to avoid the usual black/blue security-product look. I will probably keep the general direction but give it more of its own identity over time. Thank you for sharing your opinion!

Re: Show HN: Sesame - a local-first, open-source password manager

#17

Post by thehamkercat »

majorchord wrote: post #13

No offense but you might want to consider a different styling for the app/site because IMO this one screams "Claude vibe-code style".

it _is_ vibe-coded, you can read the commit descriptions in sesame-desktop repo

I wouldn't trust any password manager or critical applications like this written after 2024

bitwarden/KeePassXC are already more than enough

Re: Show HN: Sesame - a local-first, open-source password manager

#20

Post by Hamuko »

majorchord wrote: post #13

No offense but you might want to consider a different styling for the app/site because IMO this one screams "Claude vibe-code style".

It's good that vibecoded software look vibecoded, because I then immediately know not to trust that it works, not to trust that it's secure, and not to trust that the maintainer will give a shit about it in six months.
Post reply on HN