pantry

Self-hosted · end-to-end encrypted

Your passwords, notes and clipboard. On your own server.

pantry keeps your logins, notes and clipboard history in sync across your devices. Everything is encrypted before it leaves a device, and the server it syncs through is yours.

For Linux and Windows · version 0.1.0, in active development

pantry pass showing a shared login, with the list of logins on the left
Quick access: typing git finds the GitHub login

How it works

Your server keeps it. Only your devices can read it.

pantryd stores and passes on what your devices send it: ciphertext, with no key to open it.

A laptop and a desktop sync through your server. Each device encrypts and decrypts; the server in the middle only holds ciphertext. Your laptop encrypts with your vault key 9f3a c1e7… Your server pantryd holds ciphertext only 9f3a c1e7… Your desktop decrypts with the same key

Encrypted on your device

Your master password unlocks the vault key. It never leaves the device, and everything is sealed before it syncs.

Synced through your server

pantryd runs on a machine you control. It only sees ciphertext and sizes, never what is inside.

Ready on every device

Your other devices fetch the changes and open them with the same vault key. Changes made offline sync later.

The apps

Three apps, one vault.

Unlock once, and pantry pass, pantry notes and your browser can all use it. Native apps, no Electron, no browser tab.

pantry passPasswords and passkeys

  • Logins with one-time codes (TOTP)
  • Passkeys, with pantry pass as the authenticator
  • Autofill in Brave, quick access from a shortcut
  • Password generator, characters or words
  • Import from Bitwarden and KeePass
  • Shared logins for everyone on your server
pantry pass generating a 20-character password

pantry notesMarkdown notes

  • Folders, tags and search
  • Edit and preview side by side
  • Links between notes, and a graph of them
  • Shared folders, and notes sent to someone's Inbox
  • Print and export
pantry notes with a note in Markdown and its preview side by side

pantry hubThe one in the tray

  • Unlock once, for every app
  • Clipboard history, synced and encrypted
  • Quick notes from a global shortcut
  • Join servers and invite your other devices
pantry clips: the clipboard history with text, a colour and a picture

More apps on the way

pantry is a young project and keeps growing. New apps join the same vault and the same server, so whatever comes next is encrypted and synced from day one.

Why pantry

For people who'd rather run it themselves.

End-to-end encrypted

Argon2id and XChaCha20-Poly1305. Your master password never leaves your device.

Your server

pantryd is one static binary and a systemd service, on any Linux machine you control.

Several users

Family or team on one server, each with their own devices and data, and admins to manage them.

Several servers

One device can belong to a private server and a shared one, each unlocked on its own.

Linux and Windows

Native apps with a tray icon, global shortcuts and start at login.

No account with anyone

No cloud, no tracking. Even this website runs no scripts.

Set up pantry in about ten minutes.

Run pantryd on your server, install the apps, and join with an invite code.