Secrets vault basics
Ciphertext packages — keys stay on devices.
Model
Rig’s vault encrypts secret material on device. Cloud may store ciphertext packages via Continuity — not plaintext .env contents on the API.
Team sync
Richer one-click teammate vault sync is still deepening — don’t assume plaintext secrets ever transit the API.
See also
Related
- Masked env manager
- Cloud sync and Continuity
- Env files and secrets in local development
- Env file diff checker
- .env and .env.example checklist: what to commit, ignore, and rotate
- MCP config file locations: where each coding agent reads its servers
- Cloud & Continuity guides
- Continuity recovery key
- App updates
- Public profiles and Dev DNA
- Project Teleport
- Project handoff (rig.json)