Secure, offline, local-first credential and snippet management engineered specifically for software engineers.
DevVault-Electron is an open source desktop vault created by Alex Santos. It allows developers to store API keys, system prompts, shell snippets, and connection strings with AES-256 encryption, completely independent of cloud subscriptions.
Context isolation, secure IPC bridging, and master password key derivation via PBKDF2/Argon2.
Design choices, architectural patterns, and engineering decisions implemented for extreme reliability and developer experience.
All stored secrets are encrypted locally before touching the disk. Even if the local database file is copied, data remains unreadable without the master key.
Follows Electron security best practices, preventing malicious script injections and isolating renderer memory from OS system calls.
Organizes secrets into purposeful tabs with one-click copy buttons that automatically clear the system clipboard after 30 seconds.
Your data stays on your machine. Easily back up or migrate your vault by transferring a single encrypted file.
Real-world usage, terminal configuration, and technical integration commands.
// preload.ts: Expose only safe methods to the renderer
import { contextBridge, ipcRenderer } from 'electron';
contextBridge.exposeInMainWorld('vaultApi', {
saveSecret: (secret) => ipcRenderer.invoke('vault:save', secret),
getSecrets: () => ipcRenderer.invoke('vault:getAll'),
lockVault: () => ipcRenderer.invoke('vault:lock')
});Key clarifications regarding licensing, compatibility, deployment, and security.
In your OS user profile application data directory (AppData on Windows, ~/.config on Linux).
Because DevVault uses zero-knowledge encryption, forgotten passwords cannot be recovered.
Yes, configurable auto-lock triggers when the app loses focus or remains idle.
Yes, you can export encrypted backups or decrypted JSON files for migration.