Vecna CLI

Introduction

Name inspired by Vecna the arch-lich from Dungeons & Dragons, who is known for his obsession with secrets and knowledge.

Vecna is a secure, developer-focused command-line vault for storing credentials, secrets, and frequently used commands. Whether you’re managing API keys, long commands with embedded secrets, or sensitive notes, Vecna provides a simple, encrypted solution that keeps your data safe and easily accessible.

Features

• Encrypted Vault Securely stores credentials, notes, and sensitive data using AES-256-GCM encryption.

• Master Password Protection Uses a master password to derive a strong encryption key via PBKDF2 with 200,000 iterations.

• Credential Management Easily add, retrieve, update, list, and delete credentials from the command line.

• Alias Management Create aliases for frequently used commands, making it easier to manage complex or sensitive operations.

• Auto-Expiring Sessions Sessions automatically expire after a configurable timeout (default: 15 minutes), and the vault is re-locked.

• Clipboard Integration Passwords can be copied to the clipboard for quick, secure use.

• Password Generator Built-in utility to generate secure, customizable passwords on demand.

• Local-First, No Cloud All data is stored locally; Vecna performs no network operations and sends nothing externally.

• Linux-Only Support (for now) Uses /dev/shm for secure key caching; support for other platforms is planned.

Motivation

In my day-to-day work as a Software Engineer, I often find myself juggling multiple API keys, long commands (often with embedded secrets). Traditional password managers feel a bit overkill for this use case, and I wanted something that integrated seamlessly into my terminal workflow.

Vecna was born out of this need for a simple, secure, and developer-friendly vault solution. It’s designed to be lightweight, easy to use, and focused on my specific needs as a developer.

Repository

The project is open-source and available on GitHub: Vecna GitHub Repository