🔐
Encrypted vault
AES-256-GCM encryption with argon2id key derivation. Secrets never touch disk unencrypted.
KREDENVSecrets Manager
Keep your secrets encrypted locally and inject them into your shell as you move across projects.
Skip to content
🐚
Shell-native
Shell hooks for bash, zsh, fish, nushell, and PowerShell that load and unload secrets automatically as you move between projects.
📦
Single binary
One binary, no runtime dependencies, no daemon. Drop it on any machine and go.
📋
kredsfile.yaml
A declarative manifest that defines what secrets a project needs. Safe to commit, easy to read.