Settings
Manage your API keys securely. Your keys are encrypted in your browser — we can never read them.
Encrypted Vault
Your API keys are encrypted with AES-256-GCM using a password only you know.
Create a vault password to encrypt your API keys. This password never leaves your browser.
Change Password
Update your account password.
How It Works
Your privacy is our priority. Here's the technical detail:
This password never leaves your browser. We never see it, we never store it.
Your password is stretched with 600,000 SHA-256 iterations into a 256-bit AES key.
All your API keys are encrypted in your browser before being sent to our server.
The server stores only salt + IV + ciphertext. Without your password, the data is useless.
When you use the Chat, keys are decrypted in your browser and sent directly to the AI provider — we never see them in plaintext.