Secrets vault basics

Model

Team sync

See also

Ciphertext packages — keys stay on devices.

Rig’s vault encrypts secret material on device. Cloud may store ciphertext packages via Continuity — not plaintext .env contents on the API.

Richer one-click teammate vault sync is still deepening — don’t assume plaintext secrets ever transit the API.

• Masked env manager
• Cloud sync and Continuity

Secrets vault basics Ciphertext packages \u2014 keys stay on devices. secrets vault security Model Team sync

Related guides

• Masked env manager
• Cloud sync and Continuity

This article is part of the Rig knowledge base at userig.app/docs. Rig is a local-first Mac app that runs, watches, and restarts development processes with unified logs, ports, and a scoped MCP hub for AI coding agents. Your source code stays on your Mac.

https://userig.app/docs/secrets-vault-basics