Password managers are built for websites. Your secrets are built for code.
Secrets live in chat history
API keys pasted into Slack DMs stay there forever. Rotating them means asking three people if they still have the old one.
.env files everywhere
A dozen repos, each with its own .env.local, .env.production, and .env.example that nobody keeps in sync.
Prod leaks into dev
Copy DATABASE_URL from the wrong source and suddenly your local build is pointing at production.
Everything in one place.
Dotvault is structured around projects and the credential types developers actually use.
By project, not by website
Each project gets its own vault with tabs for Logins, SSH, API keys, Tokens, and Env. STRIPE_SECRET_KEY lives under acme-api, not next to your Netflix password.
Every credential type, organized
Logins, API keys, tokens, and SSH configurations, each with fields that match how you actually use them.
Local and production env, side by side
No more keeping two .env files straight. Switch environments inside the same project and copy the one you need, when you need it.
Generate strong passwords locally
Need a new database password or OAuth secret? Generate it inside the vault and save it in the same place, no browser tab, no clipboard history full of secrets.
Encrypted export and import
Move your vault to another machine or back it up offline. The file stays encrypted end-to-end. You only need the same master password to unlock it anywhere.
How Dotvault compares.
Not a password manager with a dark mode. Not enterprise infrastructure you have to host.
Security that stays out of your way.
Your master password never leaves your device. There is no server to breach and no account to hack.
Memory-hard password hashing tuned to resist GPU and ASIC cracking.
Authenticated encryption with a fresh nonce for every project write.
Decrypted data lives in memory only, and only while the vault is unlocked.
Set a timer and the vault locks itself when you step away. No secret left sitting on screen.
Free for the first 50 beta testers.
The desktop app is free during beta in exchange for feedback. After launch, it becomes a one-time purchase. Beta testers keep access.
Beta builds are unsigned, your OS may warn on first launch.