Kipass vs BurnPony Self

Kipass is a native, offline password manager that speaks the open KeePass format (.kdbx). No account, no forced cloud, no telemetry: nothing leaves your device until you turn it on yourself. Everything included, no paid tier: • Argon2id / AES-256 / ChaCha20 / Twofish encryption, 2FA codes (TOTP), FIDO2/YubiKey hardware keys • Breach checks (HIBP), password health score, Watchtower security dashboard • Threshold sharing (Shamir) for recovery, duress code and self-destruct • Encrypted attachments: photo editing, watermarking, document scanning, EXIF/GPS scrubbing, PNG/JPEG/JPEG 2000 conversion • Advanced search and Smart Groups, 3-way merge, import from 15+ formats (1Password, Bitwarden, Keeper, LastPass…) • Wi-Fi/LAN, WebDAV, SFTP, Dropbox, Box, OneDrive/SharePoint sync — encrypted, always optional • Native autofill, browser extension, Apple Watch • 39 languages, on iPhone, iPad, Mac Same engine, same file, everywhere — open your existing vault or start a new one, and keep full control of your data.

Write a secret. Share one link. It reads once and burns. BurnPony encrypts your note on your phone before anything is sent. The server stores only ciphertext it cannot read, the decryption key travels in a part of the link that browsers never transmit, and the recipient needs nothing but a browser. No app on their side, no account on yours. WHAT IT DOES One link, any recipient, any device with a browser. View limits from 1 to 100, expiry from 5 minutes to 30 days, an optional auto-hide timer after reveal. Optional passphrase as a second factor, shared through a different channel than the link. Read receipts, honestly: the recipient is told before they open. No silent tracking, ever. Labels that never leave your phone: name a note "wifi password for mom" and the read notification says so, while the server knows nothing. Sent Notes: live status, view counts, change the expiration after sending, burn early with a swipe. The recipient page speaks nine languages, following the reader's browser. WHY YOU CAN CHECK INSTEAD OF TRUST The entire system is open source: this app, the server, and the recipient page, with a written protocol specification and cross-implementation test vectors. The note page is byte-reproducible from its published source, so View Source is a real audit, not a gesture. You can even run your own server and point the app at it from Settings. HONEST LIMITS Self-destruction limits exposure; it cannot un-share. A recipient can always copy or photograph a revealed note, and BurnPony says so on the note page itself, because a privacy tool that overpromises is worse than none. From NorseHorse, maker of PGPony, CarrierPony, AgePony, RelayPony, and QuorumPony.