Security & vault
Encrypted credential vault (AES-GCM), master-password protection, and OS keychain integration.
Credentials live in an encrypted vault (AES-GCM) protected by a master password, with OS keychain integration — so your secrets stay secret.
- AES-GCM encrypted credential vault
- Master-password protection
- OS keychain — Windows Credential Manager / macOS Keychain / Linux Secret Service
- Passwords & private keys never stored in plaintext config
When cloud sync is enabled, the synced payload is end-to-end encrypted before it ever leaves your machine.