Your credentials.
At your command.

An encrypted credential vault for your terminal. Keep it local and work offline, or share it through Git with your team.

Use a local vault Use a team vault

macOS & Linux. Free and open source.

One tool. Your choice of vault.

Local vault

On your machine
cred --vault local

A private, encrypted file. Ready even when you’re offline.

Team vault

Through your Git
cred --vault team

A shared, encrypted file. Independent field edits merge.

Local when you wantKeep credentials on your machine and work offline.

Shared when you needUse your Git with field-level, conflict-aware merging.

Encrypted in bothEach vault is encrypted with age and unlocked in memory.

One install. Two ways to work.

Start with your team, or keep a vault on your own machine.

Build from source
Homebrew for macOS & Linux
brew install emircancakmakk/tap/cred

With your team

One encrypted vault in your private Git repository.

  1. Start with an empty private repository

    Create it on your Git provider without a README, license, or .gitignore. Set up Git authentication and your author name and email.

  2. Create the shared vault

    cred init

    Choose “Create a shared vault in an empty Git repository”. Name it team, enter the repository URL, and set a master password of at least 12 characters.

  3. Add your team’s first credential

    cred --vault team add my-project vercel

    Enter field names and values at the prompts. Share repository access and the master password with your teammates through a secure channel.

Git vaults require a network connection. Repository access and the master password grant access to the whole vault.

Git setup and merging

Just for you

A local encrypted file. No Git setup. Works offline.

  1. Create a local vault

    cred init local

    Set a master password of at least 12 characters, then select this vault:

    cred vault use local

  2. Add a credential

    cred add my-project vercel

    Enter a field name, its value, and whether it is secret. Submit an empty field name to finish.

  3. Find what you need

    cred

    Unlock, browse project → service → field, and press Enter to copy on macOS.

On Linux, read a field with cred my-project vercel password --show. Keep your master password safe; there is no password reset.

Local vault guide

Same commands.
Any vault.

Organize credentials by project, service, and field. Browse with your keyboard or go straight to a value.

cred --vault team my-project vercel password

Copy on macOS. Add --show for stdout on Linux.

All commands
cred — ~
Demo
❯ cred
Master password: ••••••••••••
credlocalProjects
↑ ↓ navigateenter openesc back

Interactive example with sample data. Clipboard actions are simulated.

A few useful answers.

Ask on GitHub