DKB Secret
An offline vault for the keys developers collect: API keys, passwords, SSH keys, .env sets and 2FA recovery codes. Unlocked with Touch ID, with no account, no server and no network access at all. Version 1.0.1.
- Client
- Personal project
- Period
- 09/2026 - present
- Built with
What it does
- Six item kinds organised by project, tag and environment (dev/staging/prod); search reads metadata only and never decrypts.
- Revealing or copying a value needs Touch ID; values hide again and the clipboard clears on a timer.
- Rotation history, expiry reminders, auto-lock on idle, sleep or screen lock.
- A global shortcut opens quick search over any app.
- Encrypted backups, .env import and export, and recovery-code tracking.
Engineering highlights
- The master key is created inside the Secure Enclave and requires user presence; every value is sealed with HPKE, so Touch ID is enforced by hardware rather than app code.
- Sandboxed with no network entitlement; windows are hidden from screenshots and screen sharing; secrets are wiped from memory when released.
- A 22-point security audit; tests dump every database cell to prove no plaintext is stored.
- 134 tests.
