Replace 1Password?

KINDA · weekend project

catalog price reference $2.99/mocategory 🔐 securityreported replacement votes 0

A basic encrypted vault is buildable, but browser autofill, mobile apps, passkeys, sharing, recovery, audits, and trust make this a dangerous thing to replace casually.

the prompt

Build me a local encrypted password vault to replace 1Password, CLI-first. Requirements:

- A single-binary CLI in Go using filippo.io/age for encryption and Argon2id
  (golang.org/x/crypto) to derive the key from my master passphrase. Use the
  library primitives exactly as documented, invent no crypto.
- The vault is one encrypted file at ~/.vault/vault.age holding JSON entries:
  name, username, password, URL, notes, updated timestamp.
- Commands: add, get <name> (copies to clipboard, clears it after 20 seconds),
  ls, gen (32-char random password), edit, rm.
- Fuzzy name matching on get; never print a password to stdout unless --show
  is passed.
- vault backup writes a date-suffixed copy of the encrypted file to a folder
  set in .env; it is already encrypted, so any cloud drive can sync it.
- Import from a 1Password CSV export so I can migrate in one command.
- Everything local: no server, no accounts, no telemetry.
- Out of scope: browser autofill, passkeys, and secure sharing. Those are why
  people pay 1Password; if I need them the honest move is KeePassXC or
  Bitwarden, say exactly that in the README.
- README: a five-line threat model, how key derivation works, and a warning
  that losing the master passphrase loses everything, there is no recovery.

$ open in your agent (prompt prefilled, you press enter) or copy it raw · this prompt is generated from the build plan · improve it via PR

why people still pay

They pay because password managers are one place where reliability and audited security beat saving a few dollars.

what you lose

xbrowser/mobile autofill

xpasskey support

xsecure sharing

xrecovery

xaudits

xwatchtower alerts

xfamily/team management

prior art to inspect before buildingKeePassXCMature open-source local password manager and the safest DIY-adjacent alternative.↗

reported replacements · 0share on X ↗"1Password replacement research and build prompt"

questions

What does the 1Password verdict mean?

The core job looks buildable, with meaningful gaps: browser/mobile autofill, passkey support. Read the full tradeoff list before committing. This research record is not a hosted IVCIFY tool.

What price does this directory record show for 1Password?

The directory records $2.99/month for Individual, checked 2026-07-30. Verify the source before making a purchase decision. This reference stays outside retail Stack Math unless current matched evidence supports the comparison.

What do I lose by replacing 1Password?

Honestly: browser/mobile autofill; passkey support; secure sharing; recovery; audits; watchtower alerts; family/team management. If any of those are load-bearing for you, keep paying.

Is there an open-source alternative to 1Password?

The listed prior art includes KeePassXC (Mature open-source local password manager and the safest DIY-adjacent alternative.). Inspect those projects before starting from a blank prompt.