This is the KeepInVault API server.
A zero-knowledge REST API — it stores and syncs ciphertext only. Every encryption and decryption happens on the client; the server never sees a plaintext secret or master password.
Looking for the app itself?
Open KeepInVault →
Live status
Checking…
Server facts
- Laravel
- 11.55.0
- PHP
- 8.3.35
- Environment
- local
- Routes registered
- 162
- Health endpoint
- /api/health
- Server time (UTC)
- 2026-10-16 07:20:27
Zero-knowledge, by design
Master passwords never leave the device. Keys are derived locally via
PBKDF2 and vault data is encrypted with AES-256-GCM before it's ever
sent here — this API only ever handles ciphertext, bcrypt(authKey),
and metadata.