Vault

What it does: a local, encrypted store for the secrets you don't want sitting in plain text — passwords, keys, notes. Everything is encrypted on your machine (AES-256-GCM) and is never transmitted anywhere by the app.

Safe to run: yes. The Vault only holds what you put in it.

Reading results: n/a — it's a secure store, not a scan. Two things to know: on Windows you can optionally bind the vault to this Windows user/account (DPAPI) so copying vault.json alone won't open a bound vault on another machine — and because of that, if the machine is lost or wiped, those secrets are gone for good. on Linux/non-Windows the vault unwraps with your passphrase or recovery code only — it is not sealed to this device, so vault.json plus either secret opens elsewhere. If you lose the passphrase and recovery code, those secrets are gone for good. There's no recovery, by us or anyone, so keep anything you can't re-create somewhere else as well. The Vault is deliberately left out of Back up & restore for the same reason.