Paw

Paid LinuxMacWindows

What Paw is

Paw is a free, open-source password manager for Linux, macOS, Windows, BSD, mobile, and command-line use. It stores logins, PIN codes, and personal notes in an encrypted vault, using the age encryption library. Data remains on the user’s device unless synchronization is chosen. A built-in generator creates strong, unique passwords, and time-based one-time passwords support two-factor authentication. Paw also lists an SSH key and CLI session manager and proactive password health checks. The download page provides binaries for Linux, macOS, Windows, and FreeBSD. The software is written in Go with Fyne as its interface toolkit, and its source is open for inspection. Release 0.27.0 files are signed with minisign. The project README calls Paw a work in progress without a full security audit, advises against relying on it for security, and assumes no attacker on the local machine.

Who it suits

Paw suits users wanting an open-source vault across desktop, mobile, BSD, or CLI environments. It may also fit people who need TOTP, SSH, or password-health tools.

What it does well

Free and open source
Encrypted vault for logins and notes
Built-in password generator
TOTP support for two-factor authentication
Linux, macOS, Windows, BSD, mobile, and CLI support

What to know first

No full security audit
Work in progress
Threat model assumes no local attackers
Synchronization requires user choice

Verdict

Paw combines an open codebase with vault storage, password creation, TOTP, and command-line-oriented tools. Its stated security limitations mean users should review the project’s warnings before relying on it for sensitive data.

Facts from Paw's own pages

Additional features: Paw lists an SSH key and CLI session manager and proactive password health checks. · paw.pm, 12 Oct 2026
Additional tools: Paw lists an SSH key and CLI session manager and proactive password health checks among its features. · paw.pm, 5 Oct 2026
Authentication: Paw supports time-based one-time passwords (TOTP) for two-factor authentication. · paw.pm, 5 Oct 2026
Codebase: Paw is developed in Go and uses Fyne as its UI toolkit. · paw.pm, 5 Oct 2026
Downloads: The download page lists Linux, macOS, and Windows builds, plus FreeBSD builds and source code. · paw.pm, 12 Oct 2026
Encryption: Paw uses the age encryption library to protect data. · paw.pm, 12 Oct 2026
Implementation: Paw is developed in Go and uses Fyne as its UI toolkit. · paw.pm, 12 Oct 2026
Local data: Paw says data stays on the user’s device and is shared across devices only if synchronization is enabled. · paw.pm, 12 Oct 2026
Maker: The site footer credits Luca Corbo. · paw.pm, 5 Oct 2026
Open source: Paw describes itself as open source and invites users and developers to inspect its code. · paw.pm, 12 Oct 2026
Password generator: Paw includes a password generator for creating strong, unique passwords. · paw.pm, 12 Oct 2026
Product: Paw is an open-source password manager for managing digital data for personal and professional use. · paw.pm, 12 Oct 2026
Release signatures: The download page says release 0.27.0 files are signed with minisign. · paw.pm, 12 Oct 2026
Security status: The project's GitHub README says Paw is a work in progress that has not had a full security audit and should not be relied on for security. · github.com, 5 Oct 2026
Supported platforms: Linux,macOS,Windows,BSD,mobile,CLI · github.com, 20 Sept 2026
Threat model: The project's GitHub README states that Paw's threat model assumes there are no attackers on the local machine. · github.com, 5 Oct 2026
Two-factor authentication: Paw has built-in support for Time-based One-Time Passwords (TOTP). · paw.pm, 12 Oct 2026
Vault contents: Paw stores logins, PIN codes, and personal notes in an encrypted vault. · paw.pm, 12 Oct 2026
Vault encryption details: The project's GitHub README says vault items are stored separately and metadata is encrypted in a vault.age file. · github.com, 5 Oct 2026

Where Paw stands on Freedom251

Password Managers#101 of 104