What Buddy publishes
Buddy is commercial desktop software. Its cryptography, vault format, and recovery path are public, so the claims can be tested and your data never depends on our survival.
Components
| Component | License | Source |
|---|---|---|
|
Cryptography core Rust library for key derivation, key separation, authenticated encryption and cleanup of sensitive memory. No network code. Security model: cryptography |
Apache-2.0 | brandnewbyte/buddy-crypto-core |
|
Vault format specification The SQLite schema, encrypted envelopes, KDF parameters, key contexts, attachment layout and compatibility rules, with test vectors. |
Apache-2.0 | buddy-crypto-core/docs/vault-format-v1.md |
|
buddy-rescue Standalone command-line tool that inspects, decrypts and exports a Buddy vault without the desktop app. |
Apache-2.0 | brandnewbyte/buddy-rescue |
|
Browser extension Chrome and Firefox: the native messaging bridge, pairing flow, short-lived fill tokens and form-field matching. Browser extension page |
GPL-3.0 | brandnewbyte/buddy-extension |
|
Desktop app The interface, updater and licensing code. |
Closed | Not published |
buddy-rescue
Give buddy-rescue a vault and your master password, and it writes a documented JSON or CSV export. It shares the public crypto core, but none of Buddy's licensing or network code, so it works if the app, the license server or the company is gone.
# Inspect the file. No password, nothing decrypted.
$ buddy-rescue inspect buddy.sqlite
Format: buddy-vault-v1
SQLite integrity: ok
Schema migration: 1
Vaults: 1
Personal
Vault version: 1
Entries: 214 live, 0 trashed
Attachments: 12 records, 12 present, 0 missing
KDF: argon2id · 65536 KiB · t=3 · p=4 · version 19
Status: compatible
# Decrypt locally and write the export.
$ buddy-rescue export buddy.sqlite --format json
Master password: ••••••••••••
Recovered 214 entries and 12 attachments to buddy-export
The 30-day trial is the full app, and it needs no account.
v1.3.0 macOS & Windows