SecureVaultYour secrets, on your machine.

A secure, offline password & environment-variable manager. One encrypted vault, two ways to use it — a polished desktop app and a scriptable CLI.

Get started

Desktop app (GUI)

Command line (CLI)

Download

🔐

Strong, authenticated encryption

AES-256-GCM with PBKDF2 (600,000 iterations) and a random per-vault salt. Tamper-evident by design.

🕵️

Zero-knowledge & offline

Your master password is never stored and nothing ever leaves your machine. No account, no cloud, no telemetry.

🖥️

GUI and CLI, one vault

The desktop app and the vault command share the exact same encrypted files on disk. Manage in one, read in the other.

🧩

Environment vaults for developers

Manage per-project .env secrets as encrypted, versioned vaults. Inject them into any command, or deliver typed files for native mobile builds.

Two ways in, one vault

SecureVault stores everything in local, encrypted vaults. Pick the interface that fits the moment — they read and write the same files.

You want to…	Use the…	Start here
Store and look up logins with a friendly window	Desktop app (GUI)	GUI guide →
Script secrets, inject `.env` into builds, wire up CI	Command line (`vault`)	CLI guide →
Ship secrets into Xcode / Android Studio builds	CLI — delivering secrets	Delivering secrets →
Keep a vault unlocked for an all-day dev session	CLI — the agent (preview)	Agent →

New here?

Read the Getting started overview — it installs both the app and the CLI and explains how they share vaults.

Free, open source, and kept alive by sponsors

SecureVault has no ads, no accounts and no telemetry. If it keeps your secrets safe, sponsor it on GitHub ❤ or give it a ⭐ on GitHub. How sponsorship helps →

What it is (and isn't)

SecureVault is a local-first secret manager: a desktop password manager for everyday logins, and a developer-focused CLI for managing .env secrets as encrypted, versioned vaults you can inject into any command. There is no server, no sync, and no account — you own the files, and you own the master password.