Protect API keys, configs and snippets behind a locked endpoint. Secrets are encrypted server-side and stored in a private GitHub repository.
or use email
Authentication is handled by Firebase. Your secrets are never stored there — they live encrypted (AES-256-GCM) in a private GitHub repository, behind a Cloudflare Worker.
Store API keys, Firebase configs, HTML and snippets in an encrypted private vault. Lock each item to your domains — the vault only answers requests coming from the sites you allow.
New item
Requests from your site are routed through the vault, which injects the real key server-side. The key itself never reaches the browser.
Up to 1 MB. Encrypted with AES-256-GCM before it's written to GitHub.