🔐 Security Feature

AES-256 Encryption.
Zero knowledge.

Every credential is encrypted in your browser before it ever touches our servers. Even we can't read your secrets.

How it works

Encrypted before it leaves your browser

Your credentials never travel unencrypted. The moment you save, your data is encrypted using AES-256-GCM — the same standard used by banks and governments — before being sent to our servers.

✓AES-256-GCM encryption on every credential field
✓Unique encryption key per workspace
✓Keys never stored alongside data
✓Decryption only happens locally in your browser
✓Even if our database is breached, your data is unreadable

$// You type your Supabase service key

input: "eyJhbGciOiJIUzI1NiIsInR5..."

$// Browser encrypts with AES-256-GCM

key: ENCRYPTION_SECRET (never leaves server)

iv: random 12-byte nonce

$// What gets stored in database

stored: "dGhpcyBpcyBub3QgeW91ciByZWFsIGtleQ..."

✓ Unreadable without your key

Why AES-256

The gold standard in encryption

🏦

Used by banks

AES-256 is the encryption standard used by financial institutions, governments, and intelligence agencies worldwide.

💪

Brute-force proof

There are 2²⁵⁶ possible keys. Even with all computing power on Earth, breaking AES-256 would take longer than the age of the universe.

⚡

Fast & efficient

Modern CPUs have hardware-level AES acceleration. Encryption and decryption happen in milliseconds — you'll never notice it.

🎲

GCM mode

Galois/Counter Mode provides both encryption AND authentication. Tampered data is detected before decryption.

Your credentials deserve real protection

Not a shared Google Sheet. Not a Slack DM. Real AES-256 encryption.

Start for free →

AES-256 Encryption.Zero knowledge.