Open Arsenal

Privacy-first infrastructure for identity.

MeshCore is a privacy-first, modular infrastructure for managing digital identity across devices and environments. Instead of treating passwords as isolated entries, MeshCore organizes authentication data, credentials, and related identity information into a unified, encrypted system. It is designed to run across mobile devices, desktops, tablets, and browser environments while maintaining a consistent security model built around local-first encryption and user-controlled data ownership.

At its core, MeshCore uses a Vault Engine that secures all sensitive data using modern cryptographic standards and a zero-knowledge design. This ensures that only the user can access decrypted information, with encryption applied before any synchronization or external communication occurs. Built on this foundation is a structured Identity Store that expands beyond passwords to include API keys, secure notes, recovery codes, and other forms of digital identity data, all of which can be linked together in a relational identity graph.

MeshCore also includes an Autofill Engine designed to intelligently detect login forms and securely provide credentials based on context. This system is supported by a Bridge Layer that enables communication between browser extensions, desktop applications, and mobile clients without exposing raw secrets. Optional synchronization features allow users to self-host or peer-sync encrypted data across devices, ensuring flexibility without compromising privacy.

Beyond storage and access, MeshCore introduces an Intelligence Layer that provides local-only insights into password health, usage patterns, and potential security risks such as weak or reused credentials. It also includes an Identity Expansion system that allows users to store and manage broader identity data such as licenses, tokens, and secure notes, effectively turning the system into a complete identity management platform rather than just a password manager.