A zero-knowledge secrets manager. Store your API keys and passwords once — let Claude Code, Codex, and your terminal fetch them safely, without the plaintext ever landing in an AI agent's context.
Every secret is encrypted on your device before it ever touches disk. Even a synced copy is unreadable without your master password.
Claude Code and Codex fetch secrets through a safe wrapper — the plaintext value is injected into a command's environment, never returned as text an agent can see or leak.
Enroll a device once, and future unlocks are instant — no retyping your master password every time.
Losing a device rotates and re-encrypts your whole vault, not just a permissions flag — a stolen laptop can't keep decrypting anything.
The desktop app can wire this up for you automatically (Settings → Connect Claude). Prefer doing it by hand? See the manual setup guide for the exact command and config snippet.