Uncompromising Local Security
Your server credentials, private keys, and environment configs never touch cloud servers in plaintext. Master keys are derived on-device using memory-hard Argon2id (m=64MB, t=3, p=4) and stored inside a local SQLCipher database with AES-256 encryption.
- TOFU & Known Hosts Management: Strict Trust-On-First-Use fingerprint verification defenses against MITM attacks.
- Clear SSH Host Key: Easily wipe or reset server key fingerprints from the host context menu whenever a VPS or server is reprovisioned.
- Pre-flight Connection Tester: Validate network routes and SSH credentials directly in the Host Modal before committing changes to the vault.