An offline, encrypted vault for seed phrases, private keys, passwords and API keys, designed to be easy and safe for AI agents to use.
Recorded on macOS with fictional data · full video (36 s) · transcript
- Offline Vault. The Vault has no network code, accounts, sync, updater or telemetry; it's one encrypted file on your computer. An optional Agent Companion, off unless you start it, runs in its own sandbox, can't open the Vault, and sends text an approved agent supplies to OpenAI.
- Hidden by default. Secrets stay as dots until you choose Show. Seed Phrases and Private Keys also need your Master Password.
- Careful on screen shares. Asks the OS to keep the window out of captures (best effort) and covers it when a screen-sharing app is running.
- Recoverable. A Recovery Key you write down at setup, and an Emergency Reader that opens your Vault without the app.
- Portable. Copy the Vault file to a USB stick to open it on another computer.
Warning
v1 personal project, not independently audited. Keep a paper or metal backup of any seed phrase that holds real funds.
Needs Rust 1.89+, Node 24+, and on Mac the Xcode command-line tools.
npm ci --ignore-scripts
npm run tauri dev # run in development
npx tauri build # build the appTo bundle the optional Agent Companion helper (Mac), use scripts/package-companion.sh --app; scripts/verify-companion.sh checks a built helper with fictional data.
Run ./scripts/check.sh (tests, clippy, cargo-deny, TypeScript) before a pull request. Debug builds read ENOTE_DEV_DATA_DIR=<folder> to keep your real Vault untouched, and ENOTE_DEV_ALLOW_CAPTURE=1 to allow screenshots; release builds ignore both.
AI coding agents are instructed to follow AGENTS.md:
- Use obviously fake secrets in code, tests, docs, local issues and commits. Never include real passwords, keys or seed phrases.
- Keep the Vault core and WebView offline: no HTTP clients, updaters, telemetry, crash reporters or analytics. The only exception is the separately sandboxed Agent Companion helper (ADR-0009), which never receives Vault content.
- Keep keys and decrypted Notes in the Rust core. The WebView receives only one Hidden Field at a time.
- Add dependencies only when clearly needed, pin exact versions, and explain why in the PR or local issue.
Agents should test with fictional data in a separate development Vault using ENOTE_DEV_DATA_DIR and run the checks described above before a pull request.
- Security model: what it protects against, how it works, what has been tested
- User guide: keyboard shortcuts, and reading your Vault if the app won't open
- Agent Companion: the optional helper for one approved agent, setup and limits
- File format · Design decisions · Glossary
MIT. The passphrase generator uses the EFF Long Wordlist (CC BY 3.0 US). Seed Phrase checks use the BIP39 English word list via the bip39 crate.