Features

• Secure Storage: Store passwords, API keys, SSH keys, notes, credit cards, databases, and media files with encryption

• Folders: Organize secrets in a tree-based folder structure

• Access Logging: Track who accessed which secrets and when

• Sharing: Share secrets with specific users or roles

• Bookmarks: Mark frequently used secrets as bookmarks

• Dashboard: Visual overview with statistics and charts

• REST API: Full API access for browser extensions and integrations

Roles and Permissions

Frappe Vault uses two custom roles:

• Vault User: Can create, read, update, and share their own secrets and folders

• Vault Admin: Administrative access to vault settings, policies, and audit logs

Assign these roles to users through the User DocType or Role Permissions Manager.

REST API

All secrets are accessible via REST API for integration with other applications.

Security

• All passwords and secrets are encrypted using Frappe's built-in AES encryption

• Encryption relies on the site's encryption key stored in site_config.json

• Role-based access control (RBAC) using Frappe's Permission Manager

• Access logging for audit compliance

• Secrets are only accessible by owners or explicitly shared users/roles

License

Frappe Vault is open-sourced licensed under the MIT License.