Double-entry accounting. End-to-end encrypted. Open source.

Private by Design

Your encryption key never leaves your device. The sync server stores only ciphertext — we hold no keys and cannot read your financial data. No analytics, no trackers, no third-party requests — not even fonts. Hosting in Germany under EU data protection law.

Double-Entry Accounting

Every transaction has two sides. Hushold enforces this at the core — no silent rounding errors, no missing entries, no unexplained differences. If it doesn't balance, it doesn't save.

Open Source

The client and sync server are fully open source under GPL v3 and AGPL v3. Audit the code, run your own server, or export your data to GnuCash at any time. No lock-in.

How your data stays private

  1. When you register, a key is derived from your password on your device using a memory-hard key derivation function. This key encrypts your financial data before it ever leaves your browser or phone.
  2. The sync server receives only encrypted blobs — binary data it cannot interpret. It stores them and returns them on request. It knows you exist, when you synced, and how many blobs you have.
  3. Your key is never transmitted. By design, if you lose your password, a 24-word recovery phrase restores access to your data. If you lose both, the data is unrecoverable.
  4. This is the same model used by Bitwarden for passwords and Signal for messages.

Works with what you already have.

Import

  • GnuCash .gnucash (XML or SQLite)
  • Bank export OFX · QFX · CSV
  • Mint CSV export
  • Quicken QIF format

Export

  • GnuCash From Settings, any time
  • Full data Event log as JSON

Platforms

  • Web Available now
  • iOS Coming
  • Android Coming
  • macOS Coming

Sync server

  • Hosted Managed by us
  • Self-hosted Docker · your server

Free during early access. The sync server and all clients are free to use while Hushold is in active development.

The core application will always be open source. The sync server (AGPL v3) can always be self-hosted. This will not change.