Read the encryption code AES-256-GCM + Argon2id

The database manager
that isn't an Electron app.

A native, open-source SQL client for Postgres, MySQL, SQLite, CockroachDB and Supabase. Built in Rust. An 8 MB installer — not a 250 MB Java IDE, not a 200 MB Chromium bundle pretending to be an app.

Apple Silicon · Windows x86_64 · Linux x86_64  ·  MIT licensed  ·  zero telemetry

The product

Six engines. One small native window.

A SQL editor with schema-aware autocomplete, a visual EXPLAIN viewer, and a vault that won't follow you to a different laptop. Real screenshots — no marketing illustrations.

Performance

Find the slow node, then fix it.

Visual EXPLAIN ANALYZE with hot-path highlighting and one-click "suggest index" jumps.

Schema

Your schema, always in reach.

Live schema graph powering autocomplete, JOIN suggestions, and one-keystroke alias generation.

Connect

Six engines, one config flow.

Postgres, MySQL, MariaDB, SQLite, CockroachDB, Supabase. SSH tunnels native. No driver downloads.

Security

Credentials, locked to your hardware.

Every encrypted file is fingerprinted to the machine that wrote it. Copy your connections to another laptop and they're noise — by design. Read the threat model →

01
Collect inputs
Master password · machine fingerprint · OS keychain entry.
02
Derive key
Argon2id · m=64MiB · t=3 · p=4. Slow on purpose — ~1 s on a laptop.
03
Wrap each secret
AES-256-GCM with the derived key. Each record has its own nonce.
04
Seal vault
Encrypted file written atomically. MAC validated on every read.
Layer

AES-256-GCM

Authenticated encryption for every connection, every saved query, every vault entry. Tampering invalidates the MAC; the file refuses to decrypt.

Layer

Argon2id KDF

Master password → key. Tuned to take ~1 s on a laptop, making brute-force orders of magnitude slower than a GPU farm.

Layer

Machine fingerprint

Mixed into the KDF. Linux: /etc/machine-id. macOS: IOPlatformUUID. Windows: CSP UUID. Change machines, the vault refuses to load.

Layer

OS keychain

Master key in macOS Keychain (Secure Enclave-bound), Windows Credential Manager (DPAPI), or libsecret on Linux.

How we compare

Six tools, side-by-side.

Verified against each project's public docs and changelog. Hover a column to highlight; we've left the gaps where the gaps are.

Capability
Engines supported
6 (PG · MySQL · Maria · SQLite · Cockroach · Supabase)
90+ (incl. NoSQL)
20+
15+ (relational)
10+
PostgreSQL only
Native (no Chromium bundled)
Installer size
~11 MB
~250 MB
~50 MB
~700 MB
~200 MB
~200 MB
Machine-locked vault
Brute-force lockout
Local history · diffs
Yes
Yes
Yes
Yes
Limited
Integrated psql · per-version
bundled
AI assistant · BYO key
OpenAI · Anthropic · Google · Ollama
Yes (paid)
Paid
Yes (BYO)
Visual EXPLAIN ANALYZE
Yes
Yes
Yes
Yes
SSH tunneling
Telemetry
Zero
Opt-out
Crash reports
Opt-out
Opt-out
None
Price (1 seat)
Free
Free
$89 one-time
$229/yr
Free / $19
Free
License
MIT
Apache 2.0
Commercial
Commercial
MIT (community)
PostgreSQL
Ship the small one

Stop waiting for a database client to start.

An 8 MB installer. Native binaries on macOS, Windows, and Linux. MIT licensed. Zero telemetry.

v1.0.11 · published 2026-05-13 · SHA-256 verified · all platforms