Playground

Tools for working with VaultAPI authentication and transit encryption — all computation is in-memory only, nothing is stored or transmitted.

Signature Generator

Generate the Authorization header for your API requests. The shared secret is optional — omit it to authenticate with the API key alone.

Please provide the API key.
Transit Encryptor

Encrypt a key-value payload using AES-GCM — same algorithm as the server's transit encryption. Requires your API key (enter it in the Signature Generator tab) and vault secret.

Transit Decryptor

Decrypt a base64-encoded transit ciphertext produced by the VaultAPI server or the Encryptor tab above. Requires your API key (enter it in the Signature Generator tab) and vault secret.

Please provide the ciphertext.
TOTP Generator

Generate live time-based one-time passcodes from authenticator secrets. Add as many as you like — each is computed entirely in-browser and refreshes automatically every 30 seconds. Nothing is stored or transmitted.

Please provide the authenticator secret key.
No tokens yet — add an authenticator secret above to generate live codes.