Setup Guide
Protect every API key in your project in under 2 minutes.
Getting Started
Sign up
Create an account, choose a plan, and add a card. Eligible accounts pay $0 for the first 30 days.
Choose Starter, Builder, or Pro for the trial; that plan's normal limits apply for 30 days. Stripe charges the selected monthly or annual price afterward unless you cancel first.
Protect your keys
Install the VaultProof CLI, then run it in your project directory.
Each key is Shamir-split in your terminal. The plaintext never leaves your machine. Your .env is rewritten with one project ID. Your code doesn't change.
Deploy
Copy your new env vars to your hosting platform. None of them are secrets.
These are all public identifiers — safe to commit. Your real keys exist only as encrypted Shamir shares on the proxy.
Growing provider support. 250 provider signatures, including OpenAI, Azure OpenAI, Anthropic, Google/Gemini, DeepL, MiniMax, Voyage AI, Jina AI, AI21, AssemblyAI, Hume AI, RunPod, Browserbase, Stripe, Chargebee, Adyen, Twilio, Telnyx, Vonage, MessageBird, Plivo, Paystack, Lemon Squeezy, Groq, Mistral, Together, Fireworks, DeepSeek, xAI, OpenRouter, Resend, SendGrid, Linear, Notion, Figma, Asana, ClickUp, monday.com, Todoist, Coda, Shortcut, GitHub, GitLab, Bitbucket, Jira, Zendesk, Freshdesk, Netlify, Render, Heroku, Railway, Fly.io, DigitalOcean, Linode, Vultr, Hetzner, Scaleway, Fastly, HCP Terraform, Pulumi, npm Registry, CircleCI, Buildkite, Semgrep, Qdrant, Turso, Meilisearch, Typesense, Elasticsearch, Directus, Strapi, Hygraph, DatoCMS, fal.ai, Serper, Make, n8n, Axiom, InfluxDB, Rollbar, BugSnag, Codecov, BrowserStack, Auth0, FusionAuth, Aiven, CockroachDB Cloud, DataStax Astra, Redis Cloud, ClickHouse Cloud, Razorpay, Mollie, GoCardless, Mercado Pago, Wise, Shippo, EasyPost, ShipEngine, Front, Help Scout, Calendly, Typeform, Productboard, Dropbox, Box, Pinata, DeepInfra, Baseten, Cartesia, Unstructured, Luma AI, Portkey, Scale AI, Braintrust, Eden AI, VirusTotal, IPinfo, Apollo, Buttondown, Close, Greenhouse Harvest, Xendit, Midtrans, Coinbase Commerce, Lokalise, Crowdin, Sendbird, Mux, bunny.net, Prerender.io, ImageKit, SambaNova, NVIDIA NIM, FriendliAI, Hyperbolic, Vapi, Retell AI, Rev AI, Speechmatics, Gladia, Soniox, Resemble AI, Infobip, Mailchimp Marketing, Fauna, Zilliz Cloud, Pipedream, Attio, Recurly, Phrase Strings, Transifex, RevenueCat, Qovery, Northflank, Koyeb, Deno Deploy, Snyk, Doppler, PagerDuty, Grafana, Honeycomb -- plus custom APIs via vaultproof-init custom, vault-only runtime secrets via vaultproof-init secrets add, and Ansible/Terraform secrets via vaultproof-init netops.
That's it. Your app is protected. ↓ Come back here when you need to add or rotate keys.
Managing Your Keys
Add a new key
Added a new provider to your app? Protect it.
From the terminal
Add the new key to your .env, then run init again. It detects the new key and adds it to your existing project.
vaultproof-init
From the dashboard
Click + on your project, paste the key. Provider is auto-detected from the key's shape.
Open Keys Dashboard →Rotate a key
Provider rotated your key? Update VaultProof in 30 seconds. Your project ID stays the same — zero code changes.
- 1 Get the new key from the provider's dashboard (OpenAI, Stripe, etc.)
- 2 Click Rotate on the key in your dashboard, paste the new value
- 3 Done. Zero code changes. Zero redeployments. Every app using this project ID automatically uses the new key.
vaultproof-init