sinduk (formerly pacli) is a secure, local-first CLI secrets manager. Store passwords, API keys & SSH credentials with AES encryption — zero cloud, zero trust required.
All secrets are encrypted at rest with AES and protected by a master password. Your data never leaves your device unencrypted.
Share isolated vaults with teammates using granular roles (viewer, editor, admin) and per-user wrapped cryptographic keys.
Push and pull encrypted vaults using a shared folder (Dropbox, Git, NAS) or a self-hosted zero-knowledge relay server.
Launch a local web interface with sinduk web featuring vault switcher, member management, and audit log inspection.
Retrieve any secret directly to your clipboard with --clip. Pipe any command output with sinduk cc.
Store SSH connections with host, user, and key file. Connect instantly with sinduk ssh <label> or in-browser terminal.
Export and import full encrypted vault backups with master password verification for disaster recovery.
Shorten URLs via LinklyHQ directly from the CLI. Copy shortened links to clipboard with one flag.
Run sinduk web to launch a full-featured web dashboard.
Manage all your secrets visually without giving up local-first security.
sinduk web startSupports Python 3.8+. Tested on Linux, macOS, and Windows.
No subscriptions. Zero-knowledge team collaboration. Just encrypted secrets on your local machine.