Store, organize & auto-suggest API keys in Chrome. AES-256 encrypted. Smart site detection. Your keys never leave your device.
Users
16
−2 in 30 days
Rating
0.0 / 5
unchanged in 30 days
Ratings
0
0 in 30 days
Store rank
#163K
#136K among extensions
Version
1.3.2
updated 12 Jul 2026
Users
monthly, 7 months
Latest, 16 Oct 2026:16 usersMove the mouse over the chart for any month
Ratings count
monthly, 7 months
Latest, 16 Oct 2026:0 ratingsMove the mouse over the chart for any month
The Chrome Web Store rounds user counts down to the leading digit, so the user line moves in steps. The ratings count is exact and is the better signal of real adoption.
About API Locker
API Locker — Secure API Key Manager for Developers
If you've ever pasted an API key into the wrong tab, lost a secret key buried in a .env file, or spent 10 minutes hunting for a token you copied yesterday — API Locker was built for you.
API Locker is a Chrome extension that works as your personal API key vault. It stores, organizes, and auto-suggests your API keys and secret tokens directly in your browser. Your keys are encrypted with AES-256-GCM before they ever touch storage. Your master password never leaves your device. Even we can't see your keys.
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
🔐 MILITARY-GRADE LOCAL ENCRYPTION
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
Every API key, secret token, and credential you store is encrypted with AES-256-GCM — the same standard used by banks and government systems. Your master password is used to derive the encryption key via PBKDF2 and is never stored anywhere. Close the browser? Your vault locks automatically. Your keys are safe even if your device is compromised.
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
⚡ SMART SITE DETECTION — 50+ PROVIDERS
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
API Locker recognizes which platform you're visiting and automatically surfaces the right key. Working on an AI language model platform? Your AI API key is ready. Configuring a cloud storage bucket? Your cloud credentials appear. Setting up a payment integration? Your payment API key is one click away.
Supported provider categories include:
• AI and machine learning platforms
• Cloud infrastructure providers
• Payment processing and billing APIs
• Developer collaboration and version control platforms
• Email delivery and transactional messaging services
• Database and backend-as-a-service platforms
• Monitoring, logging, and analytics tools
• Communication and messaging APIs
• E-commerce and marketplace APIs
• Authentication and identity providers
No more switching between your password manager and your terminal just to find a developer key. The right key appears right when you need it.
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
🗝️ ONE-CLICK COPY — INSTANT ACCESS
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
Click any saved key to copy it instantly to your clipboard. No double-clicking, no selecting text, no risk of accidentally exposing your key by selecting the wrong area. API Locker also lets you label keys (e.g., "Production", "Staging", "Personal"), add notes, and organize by provider — so you always know which key is which.
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
☁️ CLOUD SYNC ACROSS DEVICES (Pro)
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
Work across multiple computers? The Pro plan syncs your encrypted vault across all your devices. Only the AES-256-GCM encrypted blob is ever uploaded to the cloud — your master password and plaintext keys never leave your device. Even our servers see nothing but ciphertext.
Add a key on your work Mac. Open your home laptop. Your vault is already up to date.
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
⏰ EXPIRY DATE TRACKING (Pro)
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
API keys expire. Rotating credentials is a security best practice. But it's easy to forget — until your production app breaks at 2am because a key silently expired. API Locker lets you set expiry dates on any key and alerts you before they expire, so you can rotate credentials proactively.
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
📦 FREE PLAN — NO ACCOUNT REQUIRED
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
You don't need to create an account or hand over your email to get started. Install, set your master password, and start storing keys immediately. Everything works 100% locally.
FREE PLAN includes:
✓ Up to 3 API keys stored locally
✓ AES-256-GCM encryption
✓ Smart site detection for 50+ provider categories
✓ One-click copy
✓ Label and notes per key
✓ JSON export and import for backup
PRO PLAN includes everything in Free, plus:
✓ Unlimited API keys
✓ Encrypted cloud sync across all devices
✓ Expiry date tracking and alerts
✓ Priority support
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
🔒 BUILT FOR PRIVACY
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
• Your master password is never stored, never transmitted
• Free plan: zero network calls — completely offline
• No analytics, no telemetry, no tracking on the free plan
• Open architecture — every network call is documented
• Your encrypted blob is the only thing that ever leaves your device (Pro plan)
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
👨💻 WHO IS API LOCKER FOR?
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
API Locker is built for anyone who manages API credentials as part of their daily work:
• Software developers integrating third-party APIs
• DevOps engineers managing cloud infrastructure credentials
• AI and machine learning engineers working with multiple model APIs
• Freelancers and consultants managing keys for multiple clients
• Full-stack developers juggling production, staging, and development keys
• Security-conscious professionals who want encryption, not just a note app
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
❓ FREQUENTLY ASKED QUESTIONS
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
Q: Is this the same as a password manager?
A: No. General-purpose password managers are built for websites and login credentials. API Locker is purpose-built for API keys, secret tokens, and developer credentials. It understands API provider workflows, auto-detects the right key per platform, and is designed for the developer use case — not for saving your Netflix password.
Q: What happens if I forget my master password?
A: Your master password is the only way to decrypt your vault. We do not store it and cannot recover it. This is by design — zero-knowledge means truly zero knowledge. We recommend keeping a secure backup of your master password.
Q: Can I use this on multiple computers?
A: Yes. With the Pro plan, your encrypted vault syncs across all devices. On the free plan, you can manually export and import your vault as a JSON backup.
Q: Does the extension read my browsing history or other tabs?
A: No. API Locker onl…