KobiPass

Company passwords usually circulate in a chat thread or a shared spreadsheet. KobiPass keeps them in one encrypted file, fully offline: no cloud, no account, no subscription. The file is yours; it is encrypted with AES-256-GCM, the master password is protected with Argon2id, and the file’s integrity is verified every time it opens.

One admin and three users open the same file, each with their own password. For every user, the admin sets permissions separately for record names and values: hidden, visible, visible but masked, or editable; adding and deleting records are granted separately. Records live in tabs like Excel sheets; hidden tabs visible only to the admin are encrypted with a separate key.

Every change is written to the history (password values stay masked there too). The admin gets a Password Health Report showing weak and reused passwords. A strong password generator, automatic clipboard clearing, and auto-lock when idle are built in.

Against data loss, encrypted backups of the last 10 versions are kept, and a deleted file is detected and can be restored. By design there is no export: the data lives only in the encrypted file.