Password manager for Mac
Kiwi Password keeps logins, one-time codes, keys and notes in an encrypted vault file on your Mac. No account to create. No cloud to trust. Just your master password.
At a glance
Kiwi Password is a local-first password manager for macOS made by AppKiro. It stores your vault as an encrypted .akpr file on your Mac, protected by a master password, and works without an online account, cloud sync or telemetry. It generates strong passwords and passphrases, shows two-factor (TOTP) codes, and imports KeePass databases.
Why Kiwi Password
Everything lives in one encrypted file on your device. There is no account to sign up for, no server copy and no analytics.
AES-256-GCM protects the vault and Argon2id turns your master password into the key. The file format is documented, down to the byte.
Keep the one-time code next to the login it belongs to, with a countdown so you never paste an expired one.
Preview a .kdbx file before you import it. Groups, history, attachments, tags and OTP settings come along, and the original file is never changed.
Security
Every save produces a freshly encrypted vault file. Only the settings needed to unlock it are readable; names, passwords, folders, notes, history and attachments are all inside the ciphertext.
Password generator
Generate random passwords up to 64 characters or memorable passphrases from the 7,776-word EFF list. Randomness comes from macOS and nothing is sent anywhere.
Two-factor codes
Paste an otpauth:// link or a setup key and Kiwi Password shows the current code with a countdown. Codes from KeePass entries are imported too.
Everyday protection
Kiwi Password locks after a period of inactivity and again a few minutes after you switch away. Lock your Mac or close the lid and the vault locks at once. Copied secrets are cleared from the clipboard automatically.
Everything in one place
Logins, secure notes, .env files, API keys, SSH keys, databases, servers, Wi-Fi, cards and custom secrets, each with the right fields.
Nest folders by dragging, filter by tag with live counts, and archive what you no longer use. Deleted items wait in the Trash, ready to restore.
Pick from 37 bundled brand and bank logos, use an image link, or let a website supply its icon when you save the entry.
Every edit keeps the previous version, so you can compare changes and restore an older password.
An encrypted backup is made before each save, with 10 kept by default. Add an external folder and restore after a preview.
Attach files up to 8 MB. Text files such as .env, .json or .pem preview right in the app.
Optionally unlock with Touch ID on Macs that have it. It is set up per vault and needs your master password to turn on or off.
Search, add, edit, save and lock without reaching for the mouse.
⌘K⌘N⌘E⌘S⌘LMoving from KeePass
Open a .kdbx database with its password and optional key file, review what will be imported, then create a new Kiwi Password vault. The KeePass file is only read, never written.
Native feel
Kiwi Password follows your system appearance, adapts to small windows, and lets you choose between three layouts, compact rows and reduced motion. Use it in English, Vietnamese, Spanish, French or Simplified Chinese.
Gallery
Search. Press ⌘K and find any entry as you type. Secret fields are never searched.
Captured from Kiwi Password 1.0.29 with a sample vault. Accounts and secrets are fictional.
Honest about privacy
Your vault never leaves your Mac. Nothing is uploaded, synced or shared — not your passwords, not your notes, not even the names of your entries. The only copy of your data is the one you keep.
Download
One universal installer for Apple Silicon and Intel Macs.
Open the DMG and drag Kiwi Password into the Applications folder.
Double-click the app. If macOS asks you to confirm the first launch, choose Open Anyway in System Settings › Privacy & Security, or Control-click the app and choose Open.
Choose a master password of at least 12 characters, or import a KeePass database.
Getting started
Name it and set a master password. The vault is saved as an encrypted .akpr file you can move or back up like any document.
Press ⌘N, pick a type such as Login, and fill in the fields. Use the generator to replace weak passwords as you go.
Paste the setup key or otpauth:// link from a service into the One-time password field to see live codes.
Press ⌘K, type a few letters and copy what you need. The clipboard clears itself after 30 seconds.
Press ⌘L, or just leave: the vault locks on its own and when your Mac locks.
FAQ
Kiwi Password is a free password manager for macOS from AppKiro. It keeps your logins, two-factor codes, API keys, SSH keys, cards and notes in an encrypted vault file on your Mac, without an online account or cloud sync.
Yes. The Mac app is a free download from the official GitHub Releases page linked on this site. There is no account and no subscription.
In an encrypted .akpr file on your Mac, by default in ~/Library/Application Support/Kiro Vault. You can move the vault to another folder, such as one you sync yourself, and add an external backup folder in Settings.
The vault is encrypted with AES-256-GCM. The key comes from your master password through Argon2id with 64 MiB of memory and a random salt, tuned to take about three quarters of a second on your Mac. Every save uses a new random nonce.
No. Kiwi Password has no cloud sync. If you want the vault on another Mac, you can keep the .akpr file in a folder you sync yourself or copy an encrypted backup.
It cannot be reset or recovered, because nobody else holds a copy of your key. If you set up Touch ID for the vault you can still unlock with it, and backups open with the password they were created with.
Yes. Kiwi Password imports KeePass .kdbx files (KDBX 3.1, 4.0 and 4.1), including those that use a key file. You see a preview before anything is created, and the original file is never modified. CSV import and KDBX export are not available.
Yes. Add a TOTP setup key or otpauth:// link to an entry and the app shows the current 6- to 8-digit code with a countdown. QR code scanning is not supported.
No. There is no account, analytics, advertising or tracking. The app only goes online to check for signed updates on GitHub and, when you create or edit an entry, to fetch that website’s icon.
Any Mac with macOS 13 Ventura or later. The app is universal, so one download runs natively on both Apple Silicon and Intel Macs.
macOS can ask you to confirm the first time you open an app downloaded from the internet. Download Kiwi Password only from this page or its official GitHub releases, then choose Open Anyway in System Settings › Privacy & Security, or Control-click the app and choose Open.
Kiwi Password never sends your data anywhere. Your vault stays in one file on your Mac, encrypted with AES-256-GCM and a key derived from your master password with Argon2id, and the app locks itself when you step away. There is no server that could be breached because there is no server holding your data.
Download Kiwi Password