OxidVault

OxidVault is an offline-first, zero-knowledge password and secrets manager built for small and medium businesses, written in Rust and Tauri v2. What makes it different: - Zero-knowledge architecture — the master password and secret payloads never leave the memory-safe Rust core; the frontend gets metadata only by default - Multi-user vaults with per-user password + TOTP MFA, sharing one encrypted DEK — no shared master password - Vault files (.oxid) can live locally or on network shares (UNC paths), with atomic writes and file locking for team use - Append-only audit log with SHA-256 hash chain + HMAC checkpoints, exportable as JSON/CSV/PDF for compliance reviews - Admin policy file (GPO-style) for centrally enforced password rules, auto-lock, and KDF parameters - Extensively fuzz-tested parsers (cargo-fuzz/libFuzzer): 1.28+ billion runs on the vault file parser, zero crashes Community Edition (up to 5 users) is free and open source under AGPLv3. An Enterprise Edition adds unlimited users, LDAP, and SSO. Currently Windows-only; a browser extension (Chrome/Edge) enables autofill via native messaging, no cloud sync involved.