Vault SafeVault Safe
Every project's secrets, files and backups in one encrypted place.
Vault Safe keeps credentials, API keys, signing keys, app builds and links organised by project, and backs up your folders to your own Google Drive every week. Everything sensitive is encrypted on your device before it is uploaded.
Get Vault Safe
Free. One account works everywhere, and your data stays in sync across all your devices.
Windows
The desktop app, including weekly encrypted folder backups to your Google Drive.
Android
Coming soon to Google Play. Use the web app on your phone until then; your data is the same.
Coming soon
What it does
One app on Windows, macOS, Linux, Android, iOS and the web, showing the same data everywhere.
Credentials and consoles
Logins for servers, clients and consoles such as Firebase, Play Console, App Store Connect and AWS, with a password generator.
API keys and .env files
Keys per environment (development, staging, production). Import a .env file, copy one value, or save it back as a file.
Key files and builds
Keystores, google-services.json, certificates and SSH keys with their passwords, plus APK, AAB and IPA builds with version labels.
Links and notes
Google Docs, Sheets and other links, secure notes, files up to 50 MB, and searchable Chrome bookmarks exports.
Weekly folder backups
The desktop app backs up chosen folders to your Google Drive, uploading only new and changed files and keeping five versions of each.
Search and live sync
Search every project at once. A change on one device appears on your other devices within about a second.
How your data is protected
Your master password never leaves your device, so the services that store your data cannot read it.
- A key made on your deviceYour master password is turned into a 256-bit key with Argon2id. The key stays in memory on your device.
- Encrypted before uploadPasswords, API keys, notes, uploaded files and backed-up files (including their names) are encrypted with AES-256-GCM before they leave your device.
- Stored as locked dataThe app's database and your Google Drive only ever receive encrypted data for those items. Without your master password nobody can open them, including us.
Item titles, tags and link addresses are stored without encryption so they can be searched. Keep secrets out of titles. The master password cannot be reset or recovered.
How Vault Safe uses Google Drive
Google Drive is optional and is used only for the weekly backup feature of the desktop app.
- The app asks for the drive.file permission, which lets it see and manage only the files it creates itself. It cannot see any other file in your Drive.
- It creates a folder called "Vault Safe Backups" and stores your encrypted backup files there. It reads them back only when you restore.
- Your Google sign-in is kept in your device's secure storage (Windows Credential Manager, macOS Keychain or the Linux secret service). It is not sent to our servers.
- We do not sell Google user data, show ads, or use it to train AI models. Use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.
- You can disconnect at any time in the app (Backups → Disconnect) or at myaccount.google.com/permissions.
Full details are in the privacy policy.
Contact
Vault Safe is a personal project by Rajshree Pindolia, Bhuj, Kutch, Gujarat, India. For questions, data requests or support, email support@sanchaylabs.app.