Envault

Local-first, end-to-end encrypted desktop credential vault for storing API keys, .env files, logins, bank accounts, WiFi, documents, and health data fully offline.

• —Fully encrypted SQLite database via SQLCipher with Argon2id key derivation and a stable wrapped master key
• —Three recovery keys that re-wrap the master key on passphrase rotation instead of re-encrypting the database
• —Optional serverless per-device sync with row-level last-write-wins merge, tombstones, and conflict preservation
• —Out-of-band encrypted attachments using XChaCha20-Poly1305, HKDF-derived keys, HMAC filenames, and content-hash references
• —Dev workspace with typed credentials, prod/dev environments, cross-project references, and one-click .env block copy
• —Personal section organized by life domain covering identity, banking, credentials, WiFi, and 2FA recovery codes
• —Health module with emergency card, weight time-series charts, coverage, vaccines, and consultations
• —Identity documents that live-inherit holder data into banking and personal entries
• —Role-derived masking, on-demand WiFi QR generation, expiry notifications, and offline printable PDF backups
• —Auto-lock on inactivity, global instant search, and zero network with strict CSP and no telemetry