Site logo (light mode)

Key Nest - Password Manager

KeyNest is a secure, interactive CLI password manager built with Node.js, featuring encryption, tagging, and import/export; packaged as an MSI installer.

Author: Berlin BrunoPublished:Aug 15, 2024Updated:Jul 10, 2025

Introducing KeyNest: A Secure, Offline Password Manager for Developers

Managing credentials securely is essential — especially for developers who value privacy, simplicity, and control. I'm excited to introduce KeyNest, a lightweight yet powerful open-source CLI password manager built with Node.js, designed to run entirely offline with your data fully encrypted and owned by you.

🚀 What Is KeyNest?

KeyNest is a terminal-based password manager for personal use. It encrypts your vault with AES-256-CBC, stores it locally in your home directory, and protects it with a master password.

Whether you're a dev who lives in the terminal or just want a no-nonsense alternative to bloated password managers, KeyNest is for you.

🔧 Key Features

  • ✅ AES-256-CBC Encryption — Vault contents encrypted with a key derived from your master password.
  • ✅ Offline by Design — No cloud sync, telemetry, or tracking.
  • ✅ Cross-platform CLI — Built with Node.js, packaged as a portable .exe and .msi installer for Windows.
  • ✅ Searchable & Taggable — Organize entries using tags; search by name or username.
  • ✅ Clipboard Copy — Automatically copies passwords to clipboard (Windows).
  • ✅ Import/Export Vault — Supports CSV/JSON format.
  • ✅ Master Password Reset — Rotate master password without data loss.
  • ✅ Built-in Password Generator — Create strong, random passwords with ease.

💻 Example Usage

Choose from options like:

  • ➕ Add a new password entry
  • 🔑 Retrieve existing credentials
  • 🗑️ Delete old entries
  • 🔍 Search entries by name, tag, or username
  • 📄 Export vault to CSV or JSON
  • 📅 Import existing vaults
  • 🧰 Reset your master password


🧐 How It Works

  1. On first launch, you create a master password.
  2. It creates an encrypted vault at:
    • ~/.keynest/vault.json
    • ~/.keynest/.vault-hash
  3. Vault is encrypted using:
    • AES-256-CBC
    • A random IV per entry
    • PBKDF2 (SHA-256) for key derivation
  4. You interact entirely via terminal with a simple menu interface.

🖼 Screenshots

Main Menu Add Entry Search Vault

image
image
image

🛠 Tech Stack

  • Node.js
  • pkg (for packaging binary)
  • WiX Toolset (for .msi installer)
  • chalk, inquirer, fs-extra (for CLI UX)
  • crypto (AES & password hashing)

📆 Easy Windows Installation

  1. Download the MSI installer from the GitHub releases page.
  2. One-click install like any other app.
  3. Launch from terminal by typing:

key-nest

No setup, no config, just secure password management out of the box.

🤔 Why I Built KeyNest

Most password managers are:

  • 🧱 Heavy
  • 🌐 Cloud-bound
  • 💸 Subscription-based
  • 📉 Overkill for CLI users

KeyNest is built for developers who prefer terminal tools, offline-first design, and own their data.

📂 Project Repo & MSI Installer

🔗 GitHub: https://github.com/berlinbruno/key-nest
📆 MSI Installer: keynest-release

📊 Skills Used

  • Node.js
  • JavaScript
  • Command Line Interfaces (CLI)
  • Cryptography
  • CI/CD (semantic-release + GitHub Actions)

🔓 Open Source — Get Involved!

KeyNest is MIT-licensed and open to contributors.

  • Suggest a feature
  • Submit a PR
  • Help test cross-platform builds
  • Share screenshots and feedback

🧠 Final Thoughts

KeyNest is ideal if:

  • You want a secure, offline vault
  • You love terminal tools
  • You value simplicity over complexity

This is a project I built out of need — and I hope it’s useful to others too.

👉 Try KeyNest, own your passwords.
💬 Feedback welcome!