Hosts vault

All your hosts and keys, encrypted where only you can read them.

Hosts, passwords, private keys, snippets and command history are encrypted in your browser with a key from your master password. The server stores ciphertext.

k2shell

master password
  └─ PBKDF2-HMAC-SHA256, 600,000 rounds
       └─ AES-256-GCM wraps your vault key
            └─ AES-256-GCM encrypts each host

What you get

Folders, tags, colors

Organise hundreds of hosts and find them by search or tag.

Import

Bring hosts in from ~/.ssh/config or CSV.

Export

SSH config or CSV without secrets, or a full JSON backup with them.

Recycle bin

Restore deleted hosts for 30 days.

Recovery code

An optional way back in if you forget the master password.

Auto-lock

The key leaves memory after the idle time you choose.