Freedom251 › Password Managers
Oak Keyring
What Oak Keyring is
Oak Keyring is a free, open-source password manager with a keyboard-driven terminal interface for macOS and Linux. Its encrypted vault stays local and is the source of truth for password data. Optional Google Drive synchronization carries encrypted data and is not intended to receive the vault key. The terminal interface supports searching, viewing, creating, editing, copying, favoriting, and deleting records, plus importing and exporting vault data. A configurable password generator and password health checks are included. Recovery uses BIP-39 recovery words; maintainers cannot recover a vault if both the master password and recovery words are lost. The `ok agent` backend can use vault-stored SSH keys and return signatures without sending private keys outside the process. Oak Keyring remains in public preview. Preview binaries are unsigned and not notarized, and macOS Gatekeeper may require approval. Support is community-based through GitHub Issues and Discord.
Who it suits
It suits macOS or Linux users who prefer local-first, terminal-based password management. Users comfortable safeguarding recovery words and using preview software may consider it.
What it does well
- Encrypted local vault is the source of truth
- Optional encrypted Google Drive sync
- Terminal record management and data transfer
- Configurable generator and health checks
- Supports SSH-agent signing
What to know first
- Public preview, not a stable release
- Lost credentials and recovery words cannot be restored
- Preview binaries are unsigned and not notarized
- Community support has no formal SLA
Plans
| Plan | Billed and limits | Price |
|---|---|---|
| Oak Keyring | Public preview · open source | Free |
As openkeyring.com lists them, read 5 Oct 2026. The maker's own page has the final word.
Verdict
Oak Keyring offers local vault control, terminal workflows, and optional encrypted synchronization at no cost. Its preview status, recovery responsibility, and unsigned binaries require careful setup.
Facts from Oak Keyring's own pages
- Binary signing
- Preview binaries are unsigned and not notarized, and macOS Gatekeeper may require user approval before launch. · openkeyring.com, 5 Oct 2026
- Import and export
- Import and export workflows are available from the terminal interface for moving data into or out of the vault. · openkeyring.com, 5 Oct 2026
- Install channels
- Preview installation is documented through GitHub Release binaries, an npm wrapper, Homebrew, and source builds. · openkeyring.com, 5 Oct 2026
- Password tools
- The project lists a configurable password generator and password health checks. · github.com, 5 Oct 2026
- Platform availability
- The website's status page claims macOS Apple Silicon and Intel support for the current preview. · openkeyring.com, 5 Oct 2026
- Preview limits
- Oak Keyring is in public preview and does not claim a stable release or production replacement status. · openkeyring.com, 5 Oct 2026
- Product
- Oak Keyring is a local-first password manager with a keyboard-driven terminal interface. · openkeyring.com, 5 Oct 2026
- Records
- The TUI supports searching, viewing, creating, editing, copying, favoriting, and deleting records. · openkeyring.com, 5 Oct 2026
- Recovery
- The project describes vault recovery using BIP-39 recovery words and says maintainers cannot recover a vault if both the master password and recovery words are lost. · github.com, 5 Oct 2026
- Security review
- The site does not claim a public third-party audit or complete public implementation review. · openkeyring.com, 5 Oct 2026
- SSH agent
- The `ok agent` backend can use SSH keys stored in the vault and returns signatures without sending private keys outside the Oak Keyring process. · github.com, 5 Oct 2026
- Support
- The project directs users to GitHub Issues and Discord, and describes support as community-style and best effort with no formal SLA. · github.com, 5 Oct 2026
- Supported platforms
- macOS,Linux · github.com, 20 Sept 2026
- Sync
- Optional Google Drive sync carries encrypted data and is not intended to receive the vault key. · openkeyring.com, 5 Oct 2026
- Vault
- The vault is encrypted locally and is the source of truth for password data. · openkeyring.com, 5 Oct 2026
Where Oak Keyring stands on Freedom251
- Password Managers#64 of 104