Documentation

Choose the path that matches what you need to do.

Storage by platform

Security levels
Who can read your secrets on each platform, with and without a passphrase or passkey, and what is never protected.
iOS
App-bound key access through the Data Protection Keychain: setup, isolation, passphrases, limitations and recovery.
Android
App-bound Keystore protection on Android 12 and newer, with hardware assurance and user-presence limits explained separately.
macOS
App-bound keys for entitled apps and account-level protection for the CLI, with file isolation and release requirements for each.
Linux
Account-level Secret Service protection, passphrase guidance and the separate sandbox-bound Flatpak candidate.

Architecture
How the vault, its key hierarchy, opening, writing and protection changes work.
Choosing Keybay
Choose the smallest tool that matches whether you need local storage, provider portability, team sharing, or encrypted files.
Security
Where secrets live on each platform, how releases are verified, current evidence limits, and the private vulnerability-reporting route.
External review
Exact source and release baselines, security boundaries, code and test maps, and outstanding qualification.

Every page is generated from its repository source and links to the exact deployed commit.