GitBraints
  • Contact
  • Documentation
  • FAQ
GitBraints

Privacy-first Git-powered tools for individual designers and small teams who value data sovereignty. Own your data, control your workflow.

© Copyright 2026 GitBraints. All Rights Reserved.

About
  • Contact
Product
  • Documentation
Legal
  • Terms of Service
  • Privacy Policy
  • Cookie Policy
Git-native encrypted vault

GitPassword

A desktop GUI vault for passwords, notes, and files, encrypted locally and stored in the Git repository you choose.

Read Docs
GitPassword desktop GUI showing encrypted password details

Works with the Git remote you already use

GitHubGitHub
GitLabGitLab
BitbucketBitbucket
GiteeGitee
Self-hosted Git
Local repository
Core Concept

A Git-powered encrypted vault for individuals and small teams

Encrypt locally, then sync through a Git repository you control. Argon2id and AES-256-GCM protect passwords, private notes, and confidential files—without a centralized cloud vault or a recurring SaaS subscription that holds your data hostage.

Modern cryptography

Argon2id key derivation and AES-256-GCM encryption are designed to resist offline brute-force attacks and keep vault contents confidential.

You control the data

Keys and plaintext stay on your device. Your Git host stores encrypted blobs—not a vendor-hosted vault you lose if a cloud subscription lapses.

Core Features

One vault for passwords, notes, and files

Store credentials, private notes, and confidential files in a Git-backed vault, encrypted locally on your device.

Passwords and credentials

Password vault

  • Structured credential fields: Accounts, passwords, website URLs, TOTP codes, SSH notes, and custom fields in one place.
  • Built-in password generator: Create strong passwords with custom length and character sets, so you can stop reusing weak ones.
  • Instant search: Search by title, username, or website—including pinyin—to find credentials quickly.
Data Sovereignty

Your data stays under your control

You are not locked into a cloud vendor. Keep the vault local, on self-hosted Git, or on a major Git host—and export or migrate whenever you want.

Local or remote Git, your choice

Keep data on this machine or sync to GitHub, GitLab, Bitbucket, Gitee, or your own Git server. Whoever holds the repository holds the encrypted vault.

Import and export in the open

Export plaintext when you need a backup, audit, or migration. No proprietary lock-in if you stop using the app.

Compatible with pass

Import and export the pass (password-store) format so you can move in or out of the Unix password ecosystem.

Why Choose GitPassword

Why developers pick GitPassword

If you do not want a centralized commercial password cloud, GitPassword keeps encryption local and uses Git for history and sync.

Typical cloud password manager tradeoffs

What GitPassword does instead

Centralized breach risk: a vendor cloud is a single target; a weak master password can be attacked offline if the vault is stolen.

Local cryptography: Argon2id (memory-hard) plus an optional Vault Secret, so offline guessing is much harder even if encrypted data leaks.

Recurring SaaS fees: monthly or yearly billing, and some products restrict access if you stop paying.

GUI workflow

A real desktop app over an encrypted Git vault.

View the vault list, repository setup, and conflict recovery flows from the GitPassword desktop app.

GitPassword Main vault screen

Main vault

Search and organize passwords, notes, files, folders, and favorites.

GitPassword Repository setup screen

Repository setup

Clone or connect the Git repository that will hold your encrypted vault.

GitPassword Conflict recovery screen

Conflict recovery

Use Git history and sync state when multiple devices change the vault.

FAQ

GitPassword questions, answered plainly.

Short answers for security, Git sync, recovery, platform support, and Microsoft Store distribution.

Sync over Git

Use the Git remote you already have—GitHub, GitLab, Bitbucket, Gitee, self-hosted Git, or a local repository—to sync the encrypted vault.

  • Clipboard protection: Copied passwords are cleared from the clipboard after a timeout to reduce accidental exposure.
  • Encrypted private notes

    Encrypted notes

    • Developer and private notes: Server notes, API keys, seed phrases, and journals stay encrypted at rest.
    • Encrypted drafts: Edits are cached locally in encrypted form so a crash or power loss does not lose uncommitted work.
    • Markdown notes: Write and read structured notes without leaving the vault.

    Confidential files and media

    Secure files & Git LFS

    • Sensitive file archive: Encrypt SSH keys, TLS certificates, ID scans, and contracts in the vault.
    • Large files and Git LFS: Store files up to 16 GiB, with chunked on-demand loading. Plan for Git server capacity when you keep large files.
    • File preview: Preview common types such as txt, png, and jpg.
    • Secure media playback: Decrypt and play audio and video in-app without writing plaintext temp files.

    No SaaS vault subscription: you bring your own Git host. Windows is distributed through the Microsoft Store as a paid app with a free trial—not a recurring cloud-vault plan.

    Proprietary formats make export and migration difficult.

    Open Git workflow: a normal Git repository, so backup, cloning, and branches work the way developers already expect.

    History is hard to audit when a credential is overwritten or deleted.

    Git history: commits and branches give you a trail you can inspect and compare.