Erseni Vault shares secrets without leaving them in email or chat history. You can send a secret as a one-time link that self-destructs after it is opened, or request a secret from a customer or colleague: they open your link, enter the value, and only you can decrypt it.
All encryption happens in the browser with the Web Crypto API (AES-GCM-256 for sending, X25519 for requests). The key travels in the URL fragment, which browsers never send to the server, so the server only ever stores ciphertext. Neither the sender nor the recipient needs an account.
Servers and backups run at Hetzner in Germany. A data processing agreement under Art. 28 GDPR is available on every plan, including the free one. The interface is available in English, German and French.
The free plan covers sending and requesting secrets plus a dashboard of open, fulfilled and expired requests. Pro (EUR 10 per month) adds 30-day availability, email notifications without content and request templates; Business (EUR 30 per month) adds an audit log of metadata and encrypted file attachments. An API with API keys is included in every plan.
For AI coding agents, vault-ask (CLI and MCP server) requests a secret from a person and passes it to exactly one command or file, without the value ever appearing in the agent's chat.
The secrets component is open source under the AGPL-3.0.
No comments or reviews, maybe you want to be first?