KeyVault Sidekick / VibeProSoft
Sign in
Invitation-only · Audited · v1.5.2

Your API keys, encrypted in your browser. Never on a server.

KeyVault Sidekick is a secrets vault purpose-built for solo vibe coders. One vault per project. Generators for JWT secrets, UUIDs, and API key patterns. One-click .env export. Auto-clear clipboard. And keys that, by construction, never leave your device.

Sign in How it works ↓
ITIL Sidekick · 4 keys
STRIPE_API_KEYapi_key
••••••••••••
CLERK_SECRETsecret
••••••••••••
CLOUDFLARE_TOKENapi_key
••••••••••••
DATABASE_URLother
••••••••••••

How it works

Open. Encrypt. Generate. Export.

1
Pick a master password
PBKDF2 (310,000 iterations) derives an AES-256-GCM key. Nothing is sent anywhere.
2
Organize by project
One vault, many projects. ITIL Sidekick, Velocity, your side project — each gets its own group.
3
Generate or paste
7 built-in generators: JWT secret, UUID, hex, base64url, API key pattern, bcrypt rounds, password.
4
Export to Claude Code
One click: .env, .envrc, or settings.json. Clipboard auto-clears after 30s.

Security model

The vault is your browser. Always.

🔐
AES-256-GCM
Industry-standard authenticated encryption. A tampered blob fails to decrypt cleanly.
🔑
PBKDF2 310k
Master password derived with the OWASP 2024 iteration count. Brute-forcing a stolen blob is computationally expensive.
🚫
No network egress
CSP connect-src 'none' on the vault page — by browser policy, no outbound HTTP from the app.
📋
Clipboard auto-clear
Copied a key? Clipboard wipes after 30s. Conditional — only clears if it still contains your value.
⏱
Auto-lock on idle
15-minute idle timer by default. The derived key is cleared from memory on lock.
🔍
Auditable source
Single HTML file, no minification, no bundled deps. SHA-256 published with every release.

Built for Claude Code

Generate a Stripe key with Claude. Save it to your vault in one click.

Prefill from MCP

Claude creates a key via Stripe, Cloudflare, or any MCP tool and navigates your browser to a special URL. The vault auto-opens a pre-filled "Save key" modal. The secret never appears in your chat.

https://keyvault-sidekick.pages.dev/app.html#action=prefill
  &name=STRIPE_KEY&value=sk_live_xxx
  &type=api_key&project=ITIL+Sidekick

Direct .env export

Pick a project, pick keys, pick a format. Hit Copy or Download. Open Claude Code, paste into .env. Total time: under 10 seconds.

STRIPE_API_KEY='sk_live_xxx'
CLERK_SECRET_KEY='sk_clerk_xxx'
DATABASE_URL='postgres://localhost/mydb'

Get access

KeyVault Sidekick is invitation-only during early access.

Have an invitation? Sign in below. Want one? Reach out to rob.lauzon@vibeprosoft.com.

Sign in