Changelog
An encrypted vault for your keys
Security
Keys are encrypted with AES-256-GCM, never shown again, and requests to addresses you choose are pinned and public-only.
- Keys typed into the dashboard are stored with AES-256-GCM under a rotatable master key, never shown again and audited by name only.
- AI keys, alert SMTP, GA4, GitHub webhook secrets and preview passwords are per workspace.
- Requests to addresses you choose resolve once, refuse private, loopback, link-local and metadata addresses, and connect to exactly the address checked.
- Rate limits and local content checks on sign-up, AI work and other actions, and a public abuse report form.