keybay

Documentation

Choose the path that matches what you need to do.

Storage by platform

  • iOS

    Native Data Protection Keychain items with a fixed device-bound, non-synchronizing accessibility policy.

  • Android

    An authenticated app-private file whose store key is wrapped by Android Keystore on Android 12 and newer.

  • macOS

    Native Data Protection Keychain items for entitled apps; an authenticated file with a login-Keychain key otherwise.

  • Linux

    An authenticated local file whose store key is kept by an unlocked Secret Service provider.

Reference

  • Architecture

    Two storage shapes, one automatic production resolver, and an explicit test-backend hatch.

  • CLI recovery

    Preserve evidence, diagnose platform-store failures, and deliberately re-provision an unreadable local CLI store.

  • Choosing Keybay

    Choose the smallest tool that matches whether you need local storage, provider portability, team sharing, or encrypted files.

  • Security

    Where secrets live on each platform, how releases are verified, current evidence limits, and the private vulnerability-reporting route.

Every page is generated from its repository source and links to the exact deployed commit.