v1 · self-custody secrets · open source
🔑

Encrypted secrets for the decentralized web.

Self-custody API key management powered by your wallet. Your bucket, your encryption, your rules. We see nothing.

One API. Everything.

keychain.wtf — sdk
# install
npm install @keychain/sdk
added 1 package in 0.8s
# connect wallet identity
keychain connect --wallet 0x742d...35Cc
vault ready → encrypted
# store a secret
keychain set OPENAI_KEY "sk-proj-..."
encrypted → your vault
# retrieve anywhere
keychain get OPENAI_KEY
sk-proj-abc...xyz
# share with any wallet
keychain share OPENAI_KEY --to 0x9f3a...
shared → e2e encrypted
# revoke access
keychain revoke OPENAI_KEY --from 0x9f3a...
access revoked
E2E
Encrypted
<1ms
Decrypt time
Chains
ZK
Zero-knowledge
0
Data access
OSS
Open source

Everything you need. Nothing you don't.

IDENTITY

Your wallet is your key

No accounts. No passwords. Your wallet address is your identity. Connect once, access everything.

STORAGE

Your bucket. Your data.

Secrets live in your own Storj bucket. We have zero access — not even under legal pressure.

ENCRYPTION

Client-side, always

Everything is encrypted in your browser before it ever leaves your device. Keys never hit our servers.

MULTI-CHAIN

Every chain. One vault.

Ethereum, Solana, Bitcoin, and more. One keychain for every wallet, every chain, every app.

SDK

One API. Everything.

A single SDK to store, retrieve, and share secrets across your stack. Node, browser, edge.

SHARING

E2E encrypted sharing

Share secrets with any wallet address. End-to-end encrypted. Revoke access at any time.

Replace three tools. With one.

Auth platforms, password managers, and secrets managers — unified into one layer that runs on storage you control.

AUTH / USER SYSTEMS
replaces
PrivyTurnkeyDynamicMagicWeb3Auth
@keychain.wtf/auth

Identity stored in your bucket — no per-MAU pricing, no vendor custodying your users.

PASSWORD MANAGERS
replaces
Bitwarden1PasswordApple KeychainLastPass
@keychain.wtf/vault

Zero-knowledge credential storage on any object store. Local-first, always encrypted.

KMS / SECRETS
replaces
HashiCorp VaultInfisicalAWS KMSDoppler
@keychain.wtf/vault

No servers. No Postgres. No Redis. An encrypted blob in a bucket you own.

FeaturePrivyBitwardenHashiCorp VaultKeychain.WTF
Embedded wallet auth
Email / social auth
Password storage
API / env secrets~
Zero-knowledge~
Bring-your-own storage
No servers to operate
Open source~
Free to self-host~~
Multi-chain wallets

~ partial support  ·  one vendor per category shown for brevity

🔑

Your keys. Your secrets.
Your control.

Self-custody your secrets the same way you self-custody your crypto. No middlemen.