Trust in 30 seconds
You keep the keys.
Nest stores ciphertext.
Zero login, no server-side key custody. A fully open source, self-hostable vault where encryption happens completely on your terms.
Get started
Generate your key and start encrypting.
STEP 1
Go to Onboarding and choose Create New Vault.
STEP 2
Generate your key bundle in-browser.
STEP 3
Set a backup passphrase and download your encrypted bundle file.
Platanist Nest onboarding
Zero-account encrypted storage
No key loaded
Set up your vault in minutes
Create or import your key bundle, then start storing encrypted secrets.
Quick path
Keep this simple: generate or import your key, then save your first secret.
1. Prepare your key
Generate a new bundle or import one you already use.
2. Back it up safely
Download your encrypted bundle and store passphrase separately.
3. Save and retrieve
Secrets are encrypted locally before upload. Server stores ciphertext only.
Choose your path
You can always add with an active key. Use these paths to focus on setup or return access.
New vault setup
Your private key never leaves this browser. Losing your bundle and passphrase means permanent data loss.
Fingerprint
No key loaded
This key id helps confirm you loaded the right bundle.
Create secret
All content below is encrypted in-browser before upload.
Single secret
Bulk import from .env
Encrypted note