01
Open anything in two keys
Press Ctrl+Shift+Space in any app, type a few letters, press Enter. The link, Drive file or folder opens.
Open anylinkin two keys.
Press Ctrl+Shift+Space from any app, type a few letters, press Enter, and the right link, Drive file or folder opens. Everything you keep stays encrypted on your own devices.
Findlinks,Drive files,foldersanddocs.
One search box for everything you open at work. It lives in the tray, a shortcut away, and each item picks up its brand logo on its own.
02
Your links on your phone
The same vault on Android, searchable and fully editable. Tap a link and it opens.
03
Bring your bookmarks
Export your bookmarks from Chrome, Edge, Brave or Firefox and import the file. Each one becomes a link, and its folder becomes a tag.
- Chrome
- Edge
- Brave
- Firefox
04
Folders you can look inside
Link a folder and browse it inside the vault. PDFs, images, video and Markdown open in a preview.
05
One space per client
Keep each client's Drive folders, docs and links in their own space, and switch with one click.
06
Lost both devices? Three steps back
Point your PC at a OneDrive, Google Drive or Dropbox folder and every save lands there, still sealed. Your Emergency Kit can carry a QR to your R2 backup.
- Install KAPEVault
- Pick your file or scan your kit
- Type your master password
Your links. Now noise.
Type anything. This is the AES-256-GCM seal KAPEVault uses, running in your browser. Nothing leaves this page.
What you type
What gets stored
AES-256-GCM · fresh 12-byte IV ... · same text, new noise every time. The app derives its key with scrypt; this page uses PBKDF2.
PC and phone
Two devices. One vault. No server.
Each device seals its copy, then syncs it through a Cloudflare R2 bucket you own. No KAPEVault server to leak, sell or shut down.
How it stays locked- 01
Add a phone
On your PC: Settings, Backup, Add a phone. Scan the code with the app.
- 02
Unlock with your finger
Set it once, then open the vault with a touch.
- 03
Edit on either
Changes merge item by item, so an edit on one never wipes out the other.
Security
Locked before it leaves.
Your master password becomes a key through scrypt, and AES-256-GCM seals the whole vault on your device. Only the sealed file is backed up.
Keep it once. Open it anywhere.
Windows app
Quick search, tray, Windows Hello.
Android app
Fingerprint unlock, your links on the go, sync.
Forever Opener
One HTML file opens your vault in any browser, even offline, even without KAPEVault.
Where your vault lives
What if KAPEVault gets hacked?
There is nothing of yours on our side to take. No account, no KAPEVault server: your vault stays on your devices, and only travels to storage you own.
Your PC
One encrypted file, sealed before it is written.
Your phone
One encrypted file, in the app's private folder.
Storage you own, if you choose
Your own Cloudflare R2 bucket, or a OneDrive, Google Drive or Dropbox folder on your PC. Still encrypted.
A KAPEVault server
There is none. No account to breach, no copy of your vault on our side.
Get KAPEVault.
Two apps, one vault. Start on either and add the other later.
- Windows 10 and 11
Desktop
- Open anything with Ctrl+Shift+Space
- Import your browser bookmarks
- Folder links with in-app preview
- Windows Hello unlock
Version 0.1.4. Not code-signed yet, so Windows may say it protected your PC: choose More info, then Run anyway.
SHA-256 (release page):
2d77d6f8b530394dcb4f5e78c6d3a0af957a6060d14c541d64a40e42bc4319fe - Android 11 or later
Android
- Your links on the go
- Fingerprint unlock
- Syncs with your PC
- Full editing, not a viewer
The short answers
Questions about KAPEVault
KAPEVault
Answers from the Docs
What is KAPEVault?
A private home for the links you work from, on Windows and Android: web links, Google Drive files, local folders and docs, in one file encrypted on your device. Press Ctrl+Shift+Space in any app, type a few letters, and the right one opens.
Can it replace my browser bookmarks?
Yes. Export your bookmarks from Chrome, Edge, Brave or Firefox as an HTML file and import it in the Windows app. Each bookmark becomes a link, and its folder becomes a tag. Unlike bookmarks, they open from any app, not only the browser.
Should I keep my passwords in it?
Only if you understand the risk. KAPEVault can hold logins and 2FA codes, sealed with the same encryption as your links, but it is new and no outside security firm has audited it. If you are not sure what that means for you, keep your passwords in an established password manager and use KAPEVault for your links.
Where does my vault live?
In one encrypted file on your own devices, plus any backup you choose to keep in storage you own. Nothing about it is stored on a KAPEVault server, because there is none.
What if KAPEVault gets hacked?
There is nothing of yours on our side to take. KAPEVault has no account and BrewedOps runs no server, so we never hold your vault or your master password. The code is open source, so anyone can check.
Has KAPEVault been audited?
Not by an outside security firm. One person built it with AI coding tools, and every review so far was an AI-assisted self-audit, with each finding fixed and the report published on GitHub. The code is open source, so anyone can check it, and problems can be reported privately on GitHub.
How is the vault encrypted?
Your master password is turned into a key with scrypt, and the whole vault is sealed with AES-256-GCM before it is written or uploaded.
Do I need the cloud at all?
No. KAPEVault works fully offline. Connecting your own Cloudflare R2 bucket adds backups and phone sync.
What gets uploaded when I sync?
The sealed vault file, encrypted on your device before it leaves, and the Forever Opener page, which holds no vault data. Backup names hold a random install ID and the time, nothing about you.
What if I forget my master password?
Nobody can reset or recover it, including us. Print the Emergency Kit and keep it somewhere safe.
I lost both my devices. Now what?
Install KAPEVault, pick your vault file or scan the QR on your Emergency Kit, then type your master password. Your PC can keep that file in a OneDrive, Google Drive or Dropbox folder for you.
Can I open my vault without the app?
Yes. The Forever Opener is a single HTML file that decrypts your vault in any browser, with no network.
Is it on iPhone or Mac?
Windows and Android today. iPhone and Mac are on the list.