Security model

How Buddy actually protects your vault.

Like any password manager, you're trusting our word that this is secure. So instead of asking for blind faith, here's exactly how it's built, piece by piece.

Where your data lives

Your vault is a local database on your computer, in your operating system's application data folder. Every sensitive value in it is encrypted before it is written. It is never uploaded to us. We have no copy, no partial copy, and no way to request one.

The only things Buddy sends over the network are a license check to confirm your purchase and an update check for new versions. Neither contains anything from your vault. The app is fully functional with no internet connection at all.

How the encryption works

Your master password never leaves your machine and is never stored in plain form. It is run through Argon2id, the winner of the Password Hashing Competition and the current standard for turning a password into an encryption key. Argon2id is deliberately expensive to compute, which is what makes guessing attacks against a stolen vault file impractical.

The derived key encrypts your vault with XChaCha20-Poly1305, a modern authenticated cipher with 24-byte nonces. Authenticated means tampering is detected, not just hidden: a modified vault fails to decrypt rather than silently feeding you altered data.

Both algorithms are public, standardized, and widely studied — this isn't security through obscurity; the strength comes from the math, not from hiding how it works. Keys are wiped from memory when the vault locks, and fields are masked in the interface until you choose to reveal them.

Buddy itself is written in Rust, which was a deliberate choice: Rust's memory safety guarantees rule out entire classes of vulnerabilities — buffer overflows, use-after-free, dangling pointers — that have caused real security bugs in other password managers written in C or C++.

Key derivation

Argon2id

Encryption

XChaCha20-Poly1305

Core language

Rust

Protection while you work

  • •Touch ID unlocks the vault on macOS, with your master password held by the system keychain rather than typed into every prompt.
  • •Windows Hello does the same on Windows — face, fingerprint, or PIN, backed by your machine's TPM.
  • •Auto-lock engages when your machine sleeps or sits idle for a period you choose, clearing decryption keys from memory the same as a manual lock.
  • •Clipboard clearing removes copied passwords after a few seconds, so they don't linger for the next paste.
  • •Click-to-reveal keeps secrets masked until you ask for them.
  • •Weak and reused password warnings surface problems before an attacker does.
  • •Encrypted backups run automatically to a folder you choose, and restores are validated before they replace anything.
  • •Encrypted attachments protect files you store alongside a login — IDs, backup codes, scanned documents. Each file gets its own randomly generated key, itself wrapped under a key separate from the one protecting your entries.
  • •Signed, verified updates. Every release is cryptographically signed, and the app checks that signature before installing anything — a tampered download won't run.
  • •Safety backups before migrations. When an update changes the vault's internal schema, Buddy backs it up automatically first, so a bad migration doesn't cost you your data.

The autofill path

The browser extension never holds your vault. It connects to the desktop app through your operating system's native messaging channel, a direct local pipe between the browser and Buddy. Credentials are handed over per fill, on your machine, and nothing transits the internet.

The first connection triggers a one-time pairing step — you approve it in a prompt, and only then does the desktop app issue a secret the extension presents on every later request. Each connection is also checked at the OS level: the desktop app confirms the calling process belongs to your own user account and is the actual native-host binary it installed. Neither check stops a determined attacker already running code as you — the real protection is that your vault stays locked and encrypted regardless — but they close off casual or drive-by attempts.

What we won't claim

Buddy has not yet been through an independent security audit. One is planned as the product grows, and the report will be published here when it happens. Until then, here's precisely how Buddy works — cryptography with a track record you can check, not a claim you have to take on faith.

If you forget your master password, your vault cannot be recovered. By us, by you, by anyone. That is not a support limitation; it is what zero access actually costs, and we think it's worth it.

Found something? Security reports go to the top of the pile. Contact us.

Trust the architecture, not the promise.

Coming late 2026 for macOS and Windows.

Join the launch list