KeyVault

Overview

A secret manager for the things that otherwise live in a notes app: API keys, passwords, key pairs and encrypted files, stored per project with controlled reveal and rotation.

The problem

Credentials sprawl faster than any team’s discipline. The failure mode is not usually a breach of a vault — it is that there is no vault, and the key is in a chat message from eleven months ago.

What we built

Encrypted storage keyed by project, with explicit reveal and rotation as first-class operations rather than manual edits. Grouping by project means a credential inventory can be produced per system instead of reconstructed from memory.