Resources
Security
KeyDrop is built with security as the foundation. Here is how we protect your secrets.
Zero-Knowledge Architecture
KeyDrop uses a zero-knowledge architecture. Your secrets are encrypted on your device before they ever reach our servers. We never have access to your plaintext secrets.
Client-side encryption
All encryption happens locally using AES-256-GCM before data is uploaded.
Separate decryption keys
Your project key is never stored on our servers. Only you have it.
End-to-end encryption
Data is encrypted in transit (TLS 1.3) and at rest.
No plaintext access
We cannot read your secrets even if compelled by legal process.
Best Practices
Follow these recommendations to maximize security:
- -Never commit your project key to version control
- -Use different projects for different environments (dev, staging, prod)
- -Rotate secrets regularly using keydrop push
- -Limit team access based on principle of least privilege
- -Use strong passwords for your KeyDrop account
Security Questions?
If you have questions about our security practices or discover a vulnerability, please emailsecurity@keydrop.dev