Zero-Knowledge Secret Vault, encrypted .env management, and guided setup
Sensitive configurations and environment variables shouldn't live in plain text or shared chats. Today we are launching the Secret Vault: military-grade, zero-knowledge encryption directly in your browser, backed by project master keys and a guided setup experience.
Client-Side Zero-Knowledge Encryption
Your sensitive credentials, API keys, tokens, and .env files are encrypted and decrypted directly in volatile browser memory using AES-256-GCM. Plaintext secrets and raw encryption keys never touch our servers.
- Master Encryption Key (MEK): Your personal master passphrase derives a high-entropy key pair entirely in your browser to lock and unlock your private keyring.
- Project ENV Master Keys: Each project gets a cryptographically secure root key (AES-256) used to seal, unseal, and synchronize environment variables across team members.
- Fine-Grained Team Member Access: Re-wrap and distribute secret access securely to specific project contributors using public-key cryptography.
Seamless Modal Onboarding
Getting started with zero-knowledge security is effortless. A clean, multi-step onboarding wizard guides you step-by-step through setting your personal passphrase, auto-generating 256-bit project master keys, and adding your first secret without confusing configuration banners.
- Automated Setup Detection: The app automatically checks if your vault or project key needs setup and guides you through the process right when needed.
- Instant Key Generation & Formats: Auto-generate high-entropy root keys in HEX or BASE64 with one click and automatic synchronization to project
.envfiles. - Clean & Uncluttered Workspace: Dedicated view controls and status checks keep your workspace focused and distraction-free.