Skip to main content

all your secrets, tucked in

tuck is a small vault for your ssh keys, hosts and files. you run it on your own server, and one download sets up ~/.ssh on any machine.

everything is encrypted in your browser. the server only ever sees ciphertext.

how it works

  1. you log in with a password.
  2. you answer three questions you wrote, one at a time.
  3. your vault opens. each answer was part of the key.

get too many answers wrong and unlocking pauses, then freezes.

good to know

  • there's no recovery: forget an answer and the vault is gone. keep an export somewhere safe.
  • run it yourself: whoever runs the server could tamper with the page it sends you.

where to next

  • run it: up and running in a few minutes.
  • first login: sign up before anyone else can.