Creytix
Sign in
Creytix IDEPreview

Vault & secrets

Paste a secret once, reference it as {{vault:NAME}} — the value never touches the chat transcript or the AI.

AI

Preview — early access.

Overview

The Secrets tab hosts an encrypted mini vault built into the IDE. Anywhere in the chat, a 🔒 button lets you paste a credential straight into the vault instead of typing it into the conversation — the agent and the transcript only ever see a {{vault:NAME}} reference, never the value.

How it works

Click 🔒, give the secret a NAME (auto-uppercased, e.g. STRIPE_KEY), then click into the paste target and paste (⌘V) — typing, copy, cut, and right-click are all blocked on that field, so the raw value never lands in visible page state. The value is stashed through the vault's stash endpoint and a {{vault:NAME}} placeholder is inserted into your message in its place; the OS clipboard is cleared right after, best-effort. From then on, use {{vault:NAME}} anywhere you'd normally have pasted that secret.

Steps

  1. •

    Unlock the vault

    Open the Secrets tab and set (or enter) your vault passphrase.

  2. •

    Paste a secret from any chat

    Click the 🔒 button next to the chat input.

  3. •

    Name it

    Type a NAME — it's uppercased automatically (e.g. STRIPE_KEY).

  4. •

    Paste, don't type

    Click into the masked field and paste with ⌘V — typing is blocked on purpose.

  5. •

    Insert the reference

    Click "Insert reference" — your message gets {{vault:NAME}}, not the secret itself.

Capabilities

  • Paste-only capture — the secret is never typed, never rendered on screen past a mask, and never sent to the AI.
  • Reference substitution — {{vault:NAME}} stands in for the real value everywhere you use it.
  • Local, encrypted storage — the mini vault is encrypted and never leaves your machine.
  • Clipboard hygiene — the OS clipboard is cleared right after a paste, best-effort.
  • Desktop screenshot protection — the desktop app adds real screen-capture protection around the whole window, not just the vault field.

Limits & honest scope

This is a paste-only shield, not a full security boundary.

  • It does not defend against a keylogger — nothing in a browser can.
  • Outside the desktop app, it does not block a screenshot of your screen; screenshot/recording protection is only real inside the desktop shell's protected window.
  • You must set a vault passphrase before any secret can be stored — there's no default or skip-it option.

Related