Opportunities › Open-source password manager alternative › Proposed app
Keyhold
Self-hostable password and passkey vault with export you can verify
- Score
- 41
- confidence 66
- Evidence
- 12
- items on the page
- Rivals
- 3
- named in sources
- First version
- 70 d
- estimate
- Type
- Desktop and mobile
- PWA: on computers and phones alike
- Market since
- 2005
- Mature market · AI estimate
ScreensConcept
Desktop and mobile: Users manage passwords and set up hosting on desktop, but unlock and access credentials across devices including phones for daily login use. Sample screens on a computer and a phone, in the proposed brand. Their numbers are sample data.
Vault
Unlocked offline248 items
About this appAI proposal
Keyhold is a password and passkey manager for people who want to own their credentials. Run it on your own server with one container, or let us host it. Your vault is encrypted on your device before it is stored, so the server holds only ciphertext.
It is built for privacy-conscious individuals and homelab users wary of lock-in. Import from your current manager, and export your whole vault to open formats at any time, with a restore check that shows the export works.
Titles and web addresses are encrypted too, not only passwords. It is a web app you install on phone and desktop, so one codebase covers every device.
- Tagline
- Your passwords, on your terms, and always exportable.
- Voice
- PlainCandidSteady
- Why this name
- A keyhold is where you keep your key: it says the credentials are yours. Two plain syllables, easy to say and spell.
In the first version
Members say which features they would use. It tells PWAS what people want; it changes no score.
One-container self-hosting
Start a server with a single compose file. Guided setup covers HTTPS, backups and updates, so a homelab beginner can finish in one sitting.
No member yet
Export you can verify
Export to open formats on demand. A restore check re-imports the file into a scratch vault and reports anything missing.
No member yet
Guided migration
Import from other managers with a preview that flags fields, attachments and notes that will not carry over, before anything is written.
No member yet
Passkey storage
Save and use passkeys next to passwords, with the same encrypted sync and the same export options.
No member yet
Brand identityAI proposal
Check the name against trademark registers before using it.
Palette
#1F5F4APine · primary#F4F1EAPaper · surface#1F2A24Charcoal · text#D98E04Amber · accent#3B6EA5Slate Blue · data
Typography
Aa
Keyhold
ABCDEFGHIJKLMNOPQRSTUVWXYZ 0123456789
Your passwords, on your terms, and always exportable.
PricingAI proposal
The material shows 1Password and Dashlane list prices on request, so it gives no competitor price. These tiers are a starting point to test, not a benchmark.
Self-host
Free
- Run on your own server
- Unlimited items and devices
- Passkeys and open-format export
- Guided migration
Hosted
$3 a month
- We run and back up your vault
- Encrypted on your device
- Passkeys and verified export
- Email support
Supporter
$60 a year
- Everything in Self-host
- Priority help with self-hosting
- Funds ongoing maintenance
What it could be worthEstimate
What a software business making this much sells for today, from real deals. Pick a monthly revenue.
If it makes
Worth about
$194,000
Sale range $132,000 to $263,000
$120,000 a year in revenue
From 87 software businesses listed and sold on Empire Flippers in the last year, revenue vetted by the broker: they sell for about 19× their monthly revenue, most between 13× and 26×.
Measured on profit, the middle deal is 32× monthly net profit: about 2.7 years of profit.
An estimate, not an offer or financial advice. A real price depends on profit, growth, churn, how much of the work is the owner's, and the buyer.
How it would growAI proposal
How the product would reach new customers through its own use, and how the first ones would be found. A plan to test, not a result.
- Built-in loop
- No loop in the product. Reaches customers through open-source repositories, self-hosting communities and content about migrating. Vault use does not expose the product to non-users, apart from optional shared items.
- Do they become customers?
- Self-hosters find it through search and communities, and some may upgrade to hosted or support plans. Test whether homelab users pay at all, and whether the hosted tier attracts non-technical users.
- First customers
- Homelab users who already self-host services and use a proprietary password manager today, starting with those who have said they want to leave over price or lock-in.
- Where to reach them
- Hacker News and Reddit homelab: Post a migration guide and an open repository, and answer questions about export, encryption and self-hosting.
- Self-hosting newsletters and blogs: Offer a walkthrough for installing Keyhold in one container and ask for early testers.
- First milestone
- Fifty self-hosted installs and ten paying hosted or supporter customers within three months of launch.
Why people already pay for this
- Verified1Password sells paid plans with prices on request, on its own pricing page, plus prices on request for larger customers
- Public claimUsers avoid proprietary password managers due to concerns about losing access or having vendors make migration difficult
- Public claimProprietary password managers have usability and reliability issues that drive users toward alternatives
- AI inferencePrice increases at major password manager vendors are motivating users to explore open-source alternatives
Tech stack
Every proposal builds on the same PWA base, installable from the browser on any phone or computer. Dashed boxes are what this app adds.
- AppNext.js and TypeScript
- PWAManifest and service worker
- UITailwind CSS
- Data and authSupabase Postgres
- PaymentsStripe
- EmailResend
- HostingVercel
- This app · Client-side encryptionAudited open crypto library (WebCrypto, Argon2)Vault and metadata must be encrypted on the device before upload.
- This app · Self-host packageContainer image with compose file and sync serverSelf-hosters need a server they run themselves, not only the hosted app.
RisksAI inference
- TechnicalWriting secure client-side crypto, sync and key recovery is hard. A flaw would destroy trust. It needs an independent security audit before launch.
- PlatformA PWA cannot autofill like a native app or browser extension. The material mentions demand for Chrome, Android and iOS apps, so autofill may need extensions.
- CommercialFree open-source alternatives already exist, and self-hosters may not pay. Whether hosting or support tiers convert is untested.
- RegulatoryRunning hosted vaults means handling breach notification and data protection duties in several regions, even when data is encrypted.
- Intellectual propertyImporting from other managers depends on their export formats, which may change or be restricted. The name needs a trademark check.
Everything marked AI proposal or AI inference was written by a model from the evidence on the opportunity page. The proposed name must be checked against trademark registers before it is used.