Vault

0 secrets encrypted with AES-256-GCM

Loading...

Encryption

AES-256-GCM authenticated encryption with random nonces via crypto/rand

All secrets encrypted at rest — decryption requires the master key

Vault persisted to disk with 0600 permissions