🛡️ Decrypted key in clipboard — auto-clearing in 02:59

🔐

Web Key Manager

E2EE Zero-Knowledge

Server Master Key Unseal

Enter the Admin Startup Passphrase to unseal SMK into mlock RAM.

Admin Startup Passphrase (min 12 chars)

Confirm Admin Startup Passphrase

Passkey Authentication

No master passwords or plaintext secrets. Protected by WebAuthn hardware biometric passkeys with PRF client-side encryption.

Sign In with Passkey

Username (Optional for discoverable passkey)

OR

Register First Device

Username *

Display Name

Device Name

Stored Keys

Strictly gated single-key retrieval with Passkey verification

Create New Key

Key Name (e.g. prod-aws-secret, github-pat) *

Because secrets are never shown on screen, please type your secret twice to verify byte-for-byte match.

Enter Key *

Confirm Key (paste disabled) *

Paste key directly from system clipboard into ephemeral RAM. Plaintext is never stored in DOM.

No pasted key captured yet.

Note: Pasting automatically starts the 3-minute clipboard auto-clear timer to wipe the secret from your OS clipboard.

Generate unbiased high-entropy keys via in-memory CSPRNG rejection sampling. Never rendered in DOM.

Format Preset

Length: 32 characters

Also copy generated key to clipboard (auto-clears in 3 minutes)

Verified Devices & Phone Management

New Phone Pairing Code

Enter this 6-digit code on an already-verified device to authorize this phone:

--- ---

Waiting for approval on verified device...

Pending Approval Requests

Enrolled Verified Devices