SealedKeys is a password and secrets manager built for technical teams. Store passwords, API keys, SSH keys, TOTP seeds and recovery codes — all encrypted in your browser before they reach the server. We can't read your secrets even if we wanted to.
No reviews yetBe the first to leave a review for SealedKeys
Maker
📌
Hey Product Hunt! 👋
I built SealedKeys after getting frustrated managing credentials across multiple clients as a contractor — every tool either stored secrets in plaintext on their servers, or required trusting a company I'd never audited.
So I built the thing I wanted to use: a vault where the server genuinely cannot read your secrets. Your vault key is derived from your master password in the browser using PBKDF2 (600k iterations) and never leaves your device. We store only AES-256-GCM ciphertext.
A few things I'm particularly proud of:
- Open-source crypto — the encryption layer is on GitHub so your team's security engineer can audit it before you trust us
- Offline viewer — a single self-contained HTML file that decrypts your vault with no internet connection. If we ever shut down,
your data works forever
- Cyber Essentials certified — built for UK contractors and teams who need to evidence their security posture to clients
Still early — 25 items free, no credit card. Would love brutal feedback on what's missing for your team's workflow.
What secrets type do you wish more tools supported natively?