Buttercup is a free, open-source password manager for macOS (and Windows and Linux) that stores your credentials locally in an encrypted vault you fully control.
What is Buttercup?
Buttercup is an open-source credential vault that encrypts your passwords, API keys, and sensitive notes inside a single portable file you own outright — no subscription, no cloud account required by default. Built on a JavaScript core, it runs natively as a desktop app on macOS, Windows, and Linux, meaning one vault file travels with you across every machine you use.
The vault format is based on AES-256-CBC encryption with a PBKDF2-derived key, so the protection is serious even if the price tag is zero. You choose where the vault lives: a local folder, Dropbox, Google Drive, or any WebDAV endpoint. Buttercup never touches your secrets unless you explicitly wire up a cloud sync target yourself.
What does Buttercup do best?
Buttercup excels at giving control-oriented users a password manager they can fully audit and self-host. Because the entire codebase is on GitHub and the vault format is documented, a security-minded power user can verify exactly what happens to their data — something you simply cannot do with 1Password or Bitwarden's closed-source tiers.
- Portable vault file: one .bcup file holds everything; sync it however you like.
- Group-based organisation: nest credential groups as deeply as you want — handy for separating work, personal, and per-project secrets.
- Cross-platform parity: the macOS app behaves identically to the Windows and Linux builds, which matters when you switch between machines daily.
- Browser extension companion: a Chrome/Firefox extension handles auto-fill so you are not copy-pasting from the desktop app constantly.
- No telemetry: the app does not phone home. Period.
How much does Buttercup cost?
Buttercup is completely free to download and use — there are no premium tiers, no per-device limits, and no expiring trials. It is MIT-licensed open-source software maintained by a small team of contributors. You can install it via Homebrew Cask (brew install --cask buttercup) or grab the DMG directly from buttercup.pw.
Who should use Buttercup?
Buttercup is the right tool for developers, sysadmins, and privacy-conscious power users who want a password manager they genuinely own. If your threat model includes "I do not want my vault on a vendor's server," Buttercup solves that cleanly. It is equally well-suited to people who already pay for Dropbox or a NAS and would rather leverage existing storage than add another SaaS subscription.
It is not the right pick if you need polished mobile-first sync with zero configuration, advanced Travel Mode, or enterprise SCIM provisioning — for those scenarios, 1Password or Bitwarden's hosted cloud plans are better choices.
What are the best Buttercup alternatives?
The honest answer depends on what trade-off you are willing to make. Bitwarden is the closest open-source equivalent with a more mature mobile experience and optional self-hosted server (Vaultwarden). KeePassXC is the other obvious comparison — battle-hardened, feature-packed, but with a UI that still feels like it was designed for Windows XP. 1Password and Dashlane are polished commercial options that sacrifice local control for convenience. Buttercup sits comfortably between KeePassXC's power and the commercial managers' approachability — it is the option I reach for when setting up a vault for a developer who is allergic to subscriptions but finds KeePassXC intimidating.
How does Buttercup compare to KeePassXC?
KeePassXC has a decade-long head-start and a richer feature surface: SSH agent integration, TOTP codes, advanced auto-type, and a deep plugin ecosystem. Buttercup trades some of that depth for a noticeably cleaner interface and a more modern JavaScript codebase that is easier to extend. If you need TOTP codes built in today, KeePassXC wins. If you want something you can set up in under five minutes and hand to a technically-minded colleague without a tutorial, Buttercup is compelling. I keep both installed — KeePassXC for a legacy shared team vault, Buttercup for personal day-to-day use.
