Browser autofill
Chrome and Firefox ask the desktop app over a local channel and receive only the login you picked. The Chrome build also runs in Edge, Brave and Arc.
Get the extensionBuddy safely stores your passwords on your own computer and fills them in on the websites you use, without a subscription. Try it free for 30 days.
v1.3.0 macOS & Windows
Entries are encrypted with XChaCha20-Poly1305 before they reach your disk. We run no server that holds vaults.
How the vault is protectedA license covers every 1.x update on your personal computers, and it has no renewal date.
What the license coversThe Rust cryptography core and the vault specification are public, so the encryption described on this site can be checked against the code.
See what is open sourceBuddy is a personal password manager for your desktop Mac or PC, designed to be well-rounded without the bloat. It's easy to use, requires no account, and works offline.
Chrome and Firefox ask the desktop app over a local channel and receive only the login you picked. The Chrome build also runs in Edge, Brave and Arc.
Get the extensionDrop an export from 1Password, Bitwarden, LastPass, Apple Passwords or six other sources. Buddy detects the format and shows a preview before it writes a single entry.
What comes across from each managerDrag Buddy's capture window over a QR code on your screen. The code then counts down inside the login it belongs to, with no phone involved.
The list narrows on every keystroke across titles, tags, URLs and field values. Prefixes like tag: and url: keep a search to one field.
Unlock with a fingerprint, your face or a Windows PIN. The system keychain holds a random unlock key, never your master password.
Daily and monthly snapshots go to a folder you pick, and restoring one is built in. Point it at a synced folder and only the encrypted backup leaves your machine.
Random passwords up to 64 characters from the character sets you pick, or memorable passphrases built from words. Each one shows its strength before you use it.
buddy-rescue, our open-source command-line tool, decrypts a Buddy vault to JSON or CSV with no app, license or network connection.
Test your exit path$ buddy-rescue inspect buddy.sqlite
Format: buddy-vault-v1
Vaults: 1
Personal
Entries: 214 live, 0 trashed
KDF: argon2id · 65536 KiB · t=3 · p=4
Status: compatible
$ buddy-rescue export buddy.sqlite --format json
Master password: ••••••••••••
Recovered 214 entries and 12 attachments to buddy-export
$
Straight answers about switching, security, and what Buddy can do.
Install Buddy on both. To carry changes across, export a Buddy file on one machine and import it on the other. New entries are added, and for entries both machines have, you can choose to keep whichever copy is newer. Copying the vault file over works too.
The license is a signed token checked on your own machine, and the vault never depended on a server of ours. The format is published, and buddy-rescue can decrypt it without the app.
How recovery worksThe cryptography core, vault specification and test vectors are public today, so the implementation can be inspected. We will publish the audit report once one is complete.
Read the security modelBuddy runs on macOS and Windows, and no mobile app is in development. If you need your passwords on a phone every day, a cloud password manager is the better fit for you.
See who Buddy suits
"A password manager should be boring in the best way: fast, understandable, and paid for once."
Robert · Founder & developer
Robert has spent 18 years building production software. He built Buddy as the password manager he wanted to use, and develops and supports it himself.
Import from your current manager and use Buddy every day for the 30-day trial. If it isn't for you, uninstall it. There is nothing to cancel.
v1.3.0 macOS & Windows
Ready to buy instead? See pricing