Open-source alternatives to SAMKeychain

OrbStack is a native macOS application that replaces Docker Desktop, providing an all-in-one environment for running Docker containers, full Linux virtual machines, and local Kubernetes clusters. It runs Linux VMs directly on the macOS hypervisor framework for near-native performance, uses VirtioFS for fast bidirectional file sharing between macOS and Linux, and leverages Rosetta for near-native x86 emulation on Apple Silicon. The system assigns predictable local domain names to containers and VMs with automatic HTTPS certificate generation, forwards ports via event-driven updates, and stores

This project is a git-based documentation site and markdown knowledge base designed as a searchable archive of technical cheat sheets and guides. It functions as a repository for short technical tips and code examples to facilitate team knowledge sharing and developer onboarding. The system employs a version control workflow to manage the submission, review, and publishing of technical learnings. It includes utilities for commit management and history consolidation, as well as the ability to retrieve specific files across different branches. Security is handled through the use of system-leve

Nango is an open-source platform that connects applications to external APIs by managing authentication, data synchronization, and custom function execution. It provides a managed runtime for TypeScript integration functions, handling OAuth flows, credential storage, and token refresh for hundreds of external APIs while keeping secrets isolated from application code. The platform distinguishes itself by exposing integration functions as discoverable tools for AI agents through an MCP server or API, with per-user credential isolation that keeps provider secrets out of the agent loop. It offers

Knuff is a desktop debugging tool designed for testing Apple Push Notification service payloads. It enables the delivery of custom JSON payloads to mobile devices to verify that notifications are received correctly. The application integrates with the system keychain to manage security certificates and private keys for request signing. It also includes a utility to export these security identities from the keychain into portable file formats for use with other development tools. The tool provides mechanisms for automatic device token retrieval and a payload manager to save and reuse device t

This project is a collection of command-line tools and scripts designed to query system keychains and recover plaintext passwords for specific wireless network identifiers. It functions as a wireless network credential extractor that retrieves saved security keys for the current or specified service set identifier. The utility specifically includes a macOS keychain access tool and a Bash-based retriever to extract security keys from the system security store. It uses platform-specific terminal commands and regular expression parsing to isolate plaintext passwords from verbose system diagnosti

This is a PHP native application framework used to build standalone desktop and mobile applications. It functions as a cross-platform app wrapper and binary application bundler, encapsulating PHP codebases into native binaries and installers for macOS, Windows, Linux, iOS, and Android. The project provides a native device API bridge and OS integration layer, allowing PHP application logic to connect directly to host operating system services. This enables the execution of applications as local binaries without the requirement of a remote web server. The framework covers several high-level ca

This project is an Objective-C HTTP networking library that provides an object-oriented wrapper for CFNetwork to execute synchronous and asynchronous requests on macOS and iOS. It functions as a framework for managing HTTP sessions, performing resumable file transfers, and handling offline content caching. The library distinguishes itself through a resumable file transfer manager that tracks byte offsets and utilizes disk-backed streaming for large uploads and downloads. It also includes a secure credential manager that integrates with the system keychain to handle client certificates and aut

Franz is a multi-service messaging aggregator and unified communication workspace. It combines multiple chat, email, and calendar services into a single desktop interface to eliminate the need for switching between disparate applications. The project distinguishes itself through a privacy-focused browser wrapper that blocks third-party trackers and fingerprinting while using native system encryption for credential storage. It incorporates an AI conversation summarizer that can execute locally or via cloud hosting to condense missed messages and draft context-aware replies. The application pr

This is a Node.js library for securely hashing and verifying passwords using the bcrypt adaptive hashing algorithm. It functions as a password security module that transforms plain-text credentials into protected hashes and generates cryptographically secure salts. The implementation allows for the adjustment of computational cost to resist brute-force attacks. It provides utilities for password hash verification and the extraction of hash metadata to determine the number of encryption rounds used. The project covers a range of security and access control capabilities, including credential s

Quotio is a local LLM API proxy gateway and credential manager that intercepts and routes requests from command-line tools and integrated development environments to various AI model providers. It serves as a centralized authentication hub, managing API keys and service accounts to provide a unified interface for external AI agents. The project distinguishes itself through a routing engine that implements priority-chain and round-robin load balancing to distribute workloads across multiple accounts. It features automated API key failover, which redirects requests to backup authentication keys

NWPusher is an application for macOS and iOS designed to send, debug, and manage payloads delivered via the Apple Push Notification service. It functions as a tool for delivering custom data payloads to remote devices using secure certificates and unique device identification tokens. The project provides utilities for identifying and removing expired or invalid device tokens by interfacing with push notification feedback services. It includes a manager for loading secure certificates and private keys from keychains or encrypted files to authenticate requests to delivery servers. The toolset

The OWASP Cheat Sheet Series is a comprehensive, community-driven repository of concise security best practices and defensive coding patterns. It serves as a centralized knowledge base for developers and security professionals, providing actionable guidance to secure applications across the entire software development lifecycle. The project covers a vast array of security domains, ranging from fundamental web application hardening and authentication protocols to specialized controls for modern infrastructure and artificial intelligence systems. What distinguishes this project is its decentral

WaveTerm is a cross-platform terminal emulator that integrates artificial intelligence, graphical widgets, and remote session management into a unified, block-based workspace. By rendering the interface through a web-based engine, it allows users to organize their development environment into a grid of resizable, independent blocks that can host shells, interactive web content, and system monitoring tools. The platform distinguishes itself by embedding intelligent models directly into the command-line interface, enabling automated code generation, terminal output analysis, and multimodal file

UICKeyChainStore is a simple wrapper for Keychain on iOS, watchOS, tvOS and macOS. Makes using Keychain APIs as easy as NSUserDefaults.

A simple wrapper for the iOS Keychain to allow you to use it in a similar fashion to User Defaults. Written in Swift.

A simple Swift Keychain Wrapper for iOS, watchOS, and OS X.

Objective-C utility class for storing data securely in the key chain.

💾 GoodPersistence is an iOS library that simplifies caching data in keychain and UserDefaults. Using a property wrapper, it reduces the complexity of implementing caching mechanisms, making it easier for developers to focus on app functionality. Compatible with latest Swift and supports all iOS devices. Easy to install with SPM.

A powerful, protocol-oriented library for working with the keychain in Swift.

Use your phone's fingerprint to authenticate on any Mac — sudo, screensaver, App Store. No $199 Magic Keyboard needed. Works with iPhone, Android, Apple Watch, Wear OS, or any browser. Ready for MacBook Neo.

Helper functions for saving text in Keychain securely for iOS, OS X, tvOS and watchOS.

Helps you define secure storages for your properties using Swift property wrappers.

This project is a community-driven directory of software resources, libraries, and tools designed to support iOS application development. It serves as a centralized reference point for developers, organizing a vast ecosystem of third-party components into a searchable, structured index to facilitate discovery and project integration. The repository distinguishes itself through its collaborative curation model, which aggregates disparate utilities into a single, maintainable catalog. By leveraging a flat-file documentation structure, it provides a clear overview of the tools available for nati

This project is a comprehensive zero-knowledge security suite designed for enterprise credential management, secrets orchestration, and password management. It provides a secure, end-to-end encrypted vault that allows users to store, synchronize, and manage sensitive information, including passwords, passkeys, and infrastructure secrets, across desktop, mobile, and browser environments. The platform distinguishes itself through a strict zero-knowledge architecture where all encryption and decryption occur locally on the client, ensuring that plaintext data remains inaccessible to the server.

This project is a technical breakdown and implementation of a user interface framework's internal architecture, focusing specifically on the mechanics of the virtual DOM, reconciliation, and component lifecycles. It serves as a resource for understanding how a core logic layer manages the transition from high-level component descriptions to physical browser elements. The project distinguishes itself by providing detailed visualizations, including flowcharts and block schemes, to map the reconciliation process and code execution paths. It explores how a platform-agnostic core can be adapted fo

EFQRCode is a Swift library for generating, styling, and scanning QR codes across iOS, macOS, watchOS, tvOS, and visionOS. It functions as a toolkit for creating both static and animated QR codes and extracting encoded text from one or multiple codes within a single image. The library enables visual branding through the integration of watermarks, icons, and animated sequences. It supports multi-format export, allowing generated codes to be saved as static images, lossless PDFs, animated GIFs, or video files. The toolkit covers high-level functional areas including QR code generation, image-b

isomorphic-fetch is a cross-runtime fetch API and isomorphic HTTP client that provides a standardized request interface across different JavaScript environments. It functions as a WHATWG fetch polyfill, ensuring that network request logic behaves identically in both web browsers and Node.js. The project enables universal JavaScript development by allowing a single codebase to perform HTTP requests without environment-specific code. It integrates the fetch interface into Node.js and supports application bundling for the browser.