Cowbird av Anthony V

Cowbird is a password manager for people who want to own their data. Instead of trusting a vendor's cloud, you point Cowbird at a HashiCorp Vault you control, and everything is encrypted on your device before it's ever sent. The server only ever sees ciphertext; your passwords, cards, notes, and TOTP secrets are never readable by anyone but you.

Zero-knowledge by design

• All encryption happens locally in the browser using modern primitives (XChaCha20-Poly1305, Argon2id, X25519, Ed25519).
• Your unlock password is never stored or transmitted, and your Vault token lives only in memory; closing the browser locks the vault and requires you to unlock again.
• Cowbird is fully compatible with the Cowbird desktop app: the same Vault, the same encrypted data, usable from either.

What you can do

• Store logins, cards, identities, secure notes, standalone passwords, and fully custom items with custom fields.
• Generate strong passwords and memorable passphrases (EFF wordlist) with a live strength readout.
• View live two-factor (TOTP) codes, including secrets imported as otpauth:// URIs.
• Autofill credentials on sign-in pages, with an inline menu and prompts to save or update logins as you go.
• Share individual items with other Cowbird users and revoke access at any time — every share is end-to-end encrypted to the recipient.
• Rotate your encryption key, change your unlock password, and export/import a passphrase-protected recovery file so you never lose access.
• Import and export your items in bulk: Cowbird's own format, or migrate to/from 1Password, Bitwarden, Proton Pass, and LastPass. Clean up accidental duplicates in one click.

Requirements
Cowbird connects to a HashiCorp Vault instance that you run, using userpass, token, or AppRole authentication.
It's built for self-hosters and teams who already run Vault — not a hosted service. It does not phone home,
include analytics, or send your data to any third party.

Open source. Your keys, your Vault, your passwords.

End-to-end encrypted password manager backed by your own HashiCorp Vault. Your data is encrypted on-device; the server only ever sees ciphertext. Logins, cards, TOTP, autofill, sharing, and import/export from 1Password, Bitwarden, Proton, & LastPass.