Getting Started

Kosh is a local-first, end-to-end encrypted, and offline-only CLI password manager.
You own your data — nothing ever leaves your machine.

---

Quick Start

After installing kosh, the first step is to initialize your encrypted vault and set a master password.

If you haven’t installed Kosh yet, follow the installation guide.

---

Initialize Your Encrypted Vault

Create a new encrypted SQLite vault in your current directory:

kosh init

You’ll be prompted to create a master password, which is used to derive your encryption key using Argon2id.

Master Password Cannot Be Recovered

Kosh uses zero-knowledge encryption — your master password is never stored, never transmitted, and cannot be recovered.

• You cannot change the master password after vault creation (yet).
• If you lose the master password, all stored credentials become permanently inaccessible.

For now, it is highly recommended that you write down your master password and store it somewhere safe and offline.