All modules

Password Manager

A vault that works offline, including the breach check

An encrypted local vault for logins, with built-in two-factor codes. Every secret is encrypted at rest with a device-local key, so the raw database file is useless to anyone who copies it.

What's in it

  • Encrypted at rest

    Each password and 2FA secret gets its own device-local key — unreadable even to someone reading the database directly.

  • Built-in 2FA codes

    TOTP generation to RFC 6238, so accounts stored here do not need a separate authenticator app.

  • Offline breach check

    Flags passwords matching a bundled list of common and previously-leaked passwords. The list ships with the app — nothing is looked up online and the plaintext never leaves your device.

  • PIN lock

    Optionally require a PIN before a password is revealed.

Luma 1.1

Every module ships in every build

There is no paid tier hiding any of this. Grab the latest build straight from CI.

Get Luma