FyVault

Quick Start

Get FyVault running in 5 minutes.

1

Create an Account

Sign up at fyvault.dev/auth/register.

2

Create Your Organization

After login, you'll be prompted to create an organization. This is your workspace for secrets, devices, and team members.

3

Set Up Vault Encryption

Go to Settings → Vault Encryption → Set up a vault passphrase.

Warning: This passphrase encrypts your secrets in the browser. If you lose it, your secrets cannot be recovered. There is no reset mechanism.
4

Create Your First Secret

Go to Secrets → Create Secret.

Example: OpenAI API Key

TypeAPI Key
NameOPENAI_API_KEY
Valuesk-proj-your-actual-key
Target Hostapi.openai.com
HeaderAuthorization
TemplateBearer {{value}}
5

Register a Device

Go to Devices → Register Device.

Get your device fingerprint:

Terminalbash
sudo cat /sys/class/dmi/id/product_uuid
6

Assign Secrets to the Device

Open the device detail page → Assigned Secrets → Assign Secret → Select OPENAI_API_KEY.

7

Install the Agent

On your server:

Terminalbash
curl -fsSL https://get.fyvault.dev | bash -s -- \
  --token YOUR_DEVICE_TOKEN \
  --cloud https://api.fyvault.dev
8

Update Your .env

Before

.envenv
OPENAI_API_KEY=sk-proj-your-actual-key

After

.envenv
OPENAI_API_KEY=FYVAULT::openai_api_key
9

Start Your App

Your app runs exactly as before. The FyVault agent handles everything transparently — intercepting outbound connections and injecting real credentials at runtime.