v1.0.0 Cross-platform ~5 MB

Secrets, locked down.

A cross-platform desktop vault for your appsettings.json and secrets — encrypted at rest, role-aware, and zero-server. Drop it on OneDrive or a network share and your whole team just works.

Download for Windows Other platforms

Windows 10/11 · 64-bit · also available as .msi

Role-based access

Admin Full access · manage users

Editor Update assigned configs

Viewer Read-only, all configs

Developer Read Dev + UAT only

See it in action

The vault, at a glance

Create a vault, manage projects and configs, and control who sees what — all from one lightweight desktop app.

Creating a new encrypted vault in SettLock — Create an encrypted vault in seconds

SettLock dashboard showing projects, configs and properties — Dashboard — projects, configs, properties

SettLock user management with role assignment — Add users, assign roles

What it does

Config storage that respects secrets

Everything encrypted at rest, per-user, with the ergonomics of a plain folder. Built with Tauri v2 (Rust) + React + TypeScript in a ~5 MB binary.

AES-256-GCM encryption

Every config encrypted at rest with Argon2id key derivation — memory-hard and resistant to GPU attacks.

Role-based access

Admin, Editor, Viewer and Developer roles — enforced in both the UI and the Rust backend, not just for show.

No server required

The vault is just a folder. Put it on SharePoint, OneDrive, Google Drive or a network share — everyone points to the same path.

JSON tree viewer

Expandable, searchable tree with inline editing for authorized roles. Read your config the way you wrote it.

Global search

Find any property across every project and environment in one keystroke — no more grepping through files.

Import / export

Drag-and-drop JSON import and one-click export. Per-user encrypted copies keep everyone independent.

Access model

Four roles, clear boundaries

Each team member gets their own encrypted copy of every config they can access. Remove a user and all of their encrypted files go with them.

Role	Read	Update configs	Environments	Manage users
Admin	All	All	All	Yes
Editor	Assigned	Assigned	Assigned by Admin	No
Viewer	All	No	All (read-only)	No
Developer	Assigned	No	Dev + UAT only	No

Security

Built to keep secrets secret

Encrypted at rest, always

AES-256-GCM for data, Argon2id for key derivation. Nothing touches disk in plaintext.

Passphrase never stored

Only a SHA-256 fingerprint is kept for identity matching — per-user passphrases stay independent, with no shared secrets.

Session-based auto-lock

Unlock once, work, and let it re-lock on a configurable timer. Role enforcement runs on every action.

Under the hood

Small binary, serious foundations

Native performance, tiny footprint, no runtime for your team to install.

Tauri v2 Rust React TypeScript AES-256-GCM Argon2id Windows · macOS · Linux GPL v3

Ready to lock it down?

Grab the installer for your platform — no Node, no Rust, no dev tools needed. Everything is bundled in ~5 MB.

Windows (.exe) .msi Suggested for you

macOS is Apple Silicon only for now (Intel build coming soon) · Linux ships as .deb, .AppImage or .rpm.