FlowIQ v0.1
Credentials Vault
A functional browser-local vault: secrets are AES-GCM-encrypted at rest and identified by SHA-256 fingerprint
What is real here, and what is not. The encryption is real (Web Crypto AES-GCM-256, per-browser key, SHA-256 fingerprints, decrypt-on-reveal-only) and persistence is real (this browser's localStorage). What it is not: production secret management - the AES key lives in the same localStorage as the ciphertext, so this is demo-grade at-rest protection. Production would be a server-side vault with KMS envelope encryption, RBAC, rotation and a durable audit log.
No credentials yet. Click "Add Credential" - the secret is genuinely encrypted, persisted, and revealable only by decryption in this browser.
Then open App Connections to bind a credential to a connector.