Skip to content

Releases: Push-Key/pushkey

v2.1.0 — Initial open-core release

03 May 19:53

Choose a tag to compare

🎉 Initial open-core release

Pushkey is now publicly available as an open-core API key manager.

Install

npm install -g @pushkey/cli
# or
pip install pushkey

What's shipped

  • 🔒 AES-256-GCM vault with Argon2id KDF (pushkey_crypto.py)
  • 🆘 V3 vault format with independent recovery key slot
  • 💉 .env injection with automatic .gitignore guard
  • 🔄 Rotation tracking with health scoring
  • 🏷️ Provider detection for 32+ providers
  • 💻 Full CLI with 15 commands
  • 📦 npm package (@pushkey/cli) with cross-platform binary download
  • 107 tests covering crypto, CLI, vault, providers

Vault format

Full binary specification in SECURITY.md. The vault uses envelope encryption — both the master password and the recovery code decrypt the same random vault_key, which encrypts the body.

Open-core boundary

  • Open source: crypto, CLI, vault I/O, provider detection
  • Proprietary: desktop GUI, cloud sync backend, tier/license system

Links