Skip to content

Keyper Documentation

Secure, self-hosted credential management with browser-side encryption.

Architecture

Understand runtime flow from main.tsx through vault gating and credential CRUD.

Security Model

See how Keyper combines bcrypt passphrase verification with DEK-based AES-GCM.

Data Model

Review credentials, vault_config, and categories schema and RLS strategy.

Deploy and Operate

Self-host via Docker or the npm CLI, or use the currently published Linux desktop installers. Electron packaging support also exists for other platforms from source.

Source Map

Jump directly to implementation files for crypto, storage, UI, and deployment behavior.

Known Gaps

Track implementation-vs-documentation drift and legacy paths to keep docs accurate.