CYPHR is a secure, lightweight API key storage built for developers. Store your keys in one place instead of scattering them across dotenv files, devices, notes, or password managers. Keys are encrypted with AES-256-GCM before storage, with fast global access via Cloudflare Workers and simple GitHub OAuth login. Fully open source and free to use, with up to 15 keys per user. No unnecessary enterprise complexity, just a simple way to store, manage, and access your API keys wherever you work.
I kept running into a simple problem while working on my own projects: keeping API keys in sync across different devices. They'd end up scattered across different .env files, on raw notes and sometimes in password managers. Keeping everything up to date across devices became a recurring hassle.
I wanted the convenience of having my keys available wherever I work, but I didn't feel comfortable putting sensitive API keys into general purpose cloud storage just for the sake of syncing them. I wanted something extremely straightforward so I came up with CYPHR !
A few things about how it works:
Keys are encrypted with AES-256-GCM before being stored.
Runs on Cloudflare Workers, with PostgreSQL handling the data underneath.
Authentication via GitHub OAuth (Supabase-backed) - no separate password to remember, if you have access to your GitHub, you have access to your keys !
Simple, no-bloat dashboard - nothing beyond what you actually need.
One important limitation I am also upfront about:CYPHR doesn't support full End-to-End Encryption yet. Keys are encrypted at rest, decryption only happens on demand and the plaintext key is never logged or exposed. I think being precise here matters more than throwing around impressive sounding security terminology.
CYPHR is completely open source and free right now, with a 15 key limit per user.
This is still an early product, but I want to put it in front of real developers and see if it can actually solve a problem people face. If there is enough traction and people find it useful, I plan to keep building it out and introduce paid plans with more features down the line.
Hey everyone 👋🏼
I kept running into a simple problem while working on my own projects: keeping API keys in sync across different devices. They'd end up scattered across different .env files, on raw notes and sometimes in password managers. Keeping everything up to date across devices became a recurring hassle.
I wanted the convenience of having my keys available wherever I work, but I didn't feel comfortable putting sensitive API keys into general purpose cloud storage just for the sake of syncing them. I wanted something extremely straightforward so I came up with CYPHR !
A few things about how it works:
Keys are encrypted with AES-256-GCM before being stored.
Runs on Cloudflare Workers, with PostgreSQL handling the data underneath.
Authentication via GitHub OAuth (Supabase-backed) - no separate password to remember, if you have access to your GitHub, you have access to your keys !
Simple, no-bloat dashboard - nothing beyond what you actually need.
One important limitation I am also upfront about: CYPHR doesn't support full End-to-End Encryption yet. Keys are encrypted at rest, decryption only happens on demand and the plaintext key is never logged or exposed. I think being precise here matters more than throwing around impressive sounding security terminology.
CYPHR is completely open source and free right now, with a 15 key limit per user.
This is still an early product, but I want to put it in front of real developers and see if it can actually solve a problem people face. If there is enough traction and people find it useful, I plan to keep building it out and introduce paid plans with more features down the line.
Thanks a lot for checking CYPHR out ! ❤️