Getting started

KeepSafe keeps your API keys and other credentials encrypted, and watches the services behind them. This page takes you from a new account to your first alert in a few minutes.

Create your account

Open KeepSafe and choose Create account. You can sign up with an email address and password, or continue with GitHub or Google.

Once you are in, KeepSafe shows a short checklist on the dashboard. It is the quickest way to cover the basics, and it disappears once you have done them.

Set your reveal PIN

Secrets in the vault stay masked until you reveal them, and revealing one asks for a reveal PIN. The PIN is separate from your password, so someone who learns your password still cannot read your keys.

Set it from Settings → Security. You will be asked to confirm who you are before the PIN is saved.

Store your first key

1. Go to Vault and choose Add credential.
2. Give it a name you will recognise later, such as Stripe live payments.
3. Pick the provider, the type of secret and the environment it is used in.
4. Paste the secret and save.

The secret is encrypted before it is stored. From now on it appears masked in every list.

Connect the provider

A stored key tells KeepSafe what you hold. Connecting the provider lets it watch what that key is doing.

1. Go to Providers and choose Connect provider.
2. Pick the service, then use a key already in your vault or paste a new one.
3. KeepSafe checks the key with the provider before it saves the connection.

From then on, KeepSafe reads usage, quota and health on a regular schedule. You can also choose Sync now at any time.

Turn on notifications

Alerts always appear in the app. To hear about them when KeepSafe is closed, open Settings → Notifications and allow push notifications on each device you want to use.

Where to go next

• The vault explains credential types, statuses and rotation reminders.
• Monitors shows how to watch an endpoint or a scheduled job.
• Account security covers two-step sign-in and passkeys.