Envpin — API Key Vault

Pin. Copy. Build. Envpin is a small, privacy-first API key vault for developers. Your secrets are encrypted locally before they are stored or synchronized through Chrome Sync. Envpin runs without its own backend, requires no separate Envpin account, does not read the websites you visit, and includes no analytics or advertising. • Organize API keys with optional website URLs and notes. • Search by service, name, website, or note. • Copy a key with one click. • Keep keys masked by default; reveal them for 10 seconds. • Encrypt service names, key names, websites, notes, and secrets locally before saving them. • Keep the vault unlocked until you lock it or restart Chrome. • Synchronize encrypted entries with your signed-in Chrome account when Chrome Sync is enabled. Create a vault with a master password of at least eight characters. Choose a long, unique passphrase: there is no password recovery. Envpin does not provide an independent backup service. Envpin requires only the storage permission. It does not read websites, automatically fill keys, operate a backend, or include analytics and advertising. Encryption does not protect a secret after you copy it to the system clipboard or protect an already-unlocked device from malware. Envpin has not received an independent security audit. Physical-device Chrome Sync QA between Windows and macOS passed on September 16, 2026. Deletion removes the saved key content and retains an encrypted deletion marker to keep an outdated offline copy from restoring it. Deletion markers use part of Chrome Sync's limited storage space. Update Envpin on all devices before using the new data format.