Your space. Your data. Your vault.
FM Vaults is a local-first vault for secrets, credentials, environment variables and structured notes. It is designed to keep everything encrypted on your device, organized the way you work, and exportable on your terms.
In development. You can create an encrypted vault in this browser today and organize it into folders and collections. Records come next, so there is nothing sensitive to keep in it yet. The door on this page is an illustration and unlocks nothing.
Door preview closed.
Local-first by design
FM Vaults is being built so your vault lives in your browser, not on our servers.
On your device
The Local Vault is designed to keep its data in your browser's own storage. It needs no account and does not upload your records.
Encrypted before it is stored
Records are designed to be encrypted with a passphrase that only you know, using standard, reviewed cryptography.
Works without a connection
After your first visit, the Local Vault is designed to keep working offline.
Local encryption and unlock work today. Offline use is planned.
What you will be able to do
The previews below are illustrations with made-up data. Folders and collections work today; fields, records, templates and export are still to come.
Folders that match how you work
Nest folders as deep as you need, with collections inside. Move, rename and archive without losing track.
- Work
- FM Watch
- Development(collection)
- Production(collection)
- Gateway
- Development(collection)
Collections with your own fields
Start from a template such as environment variables, API credentials or website accounts, or design your own fields: text, secret, number, date, select and more.
Environment variables
| Key | Value | Environment |
|---|---|---|
| API_URL | https://example.test | Development |
| SESSION_KEY | •••••••••• | Production |
Secret values stay masked
Export and back up on your terms
Export a record, a collection, a folder or a whole vault. Secrets stay hidden unless you choose otherwise, and name clashes are shown before anything is written.
- JSON
- CSV
- TXT
- .env
- PNG snapshot
- ZIP
- Encrypted backup
2 files would be named development.env. Add folder names or choose another way to resolve it.
Plain talk about privacy
- No server copy
- Your Local Vault is not backed up to a server. If you clear this browser's site data or lose the device, the vault is gone unless you exported a backup.
- We cannot recover your passphrase
- Nobody can reset it for you. The plan includes a recovery key that you keep yourself.
- Not perfect security
- Encryption protects stored data. It cannot protect an unlocked vault from malware, a hostile browser extension or someone watching your screen, and a weak passphrase can be guessed offline if someone copies your data.
- No tracking
- FM Vaults does not use analytics or third-party scripts.
Questions
Can I use FM Vaults today?
Partly. You can create an encrypted Local Vault, unlock it, and organize it into folders and collections. Records, custom fields and export are still in development.
Do I need an account?
No. The Local Vault is designed to work without an account or a sign-in.
Is my data uploaded?
No. The Local Vault keeps its data in your browser only and never sends it to a server.
What if I forget my passphrase?
Without your passphrase or your recovery key, the data cannot be opened by anyone, including us.
What if I clear my browser data?
The Local Vault in that browser is deleted. Export an encrypted backup to keep a copy somewhere else.
Which languages and themes are supported?
English and Bahasa Indonesia, in a Light or Dark theme.