VaultBox is a local-first inventory app. Treat the machine that runs it as the trust boundary.

• .env (repo root) holds SECRET_KEY and VAULTBOX_ENCRYPTION_KEY. Django creates it on first start (mode 0600). Never commit it.
• Changing VAULTBOX_ENCRYPTION_KEY makes existing Fernet ciphertext undecryptable (holding secrets, seed phrases, wrapped backup-schedule passwords). Back up .env with the database.
• Backup archive passwords are chosen per backup and are not stored. Losing the password means that .vaultbox file cannot be restored.

• Sign-in is passkeys (WebAuthn). RP ID is localhost unless VAULTBOX_HOSTNAME or Admin → Site & Hostname sets another name. Open the App URL that matches that RP ID (http://localhost:5173 for local beta, not 127.0.0.1). After an RP ID change, login at the new host offers admin passkey bootstrap (no keys exist for that RP ID yet). Old passkeys remain bound to the previous host.
• There is no password login.
• Demo inventory reset is Full Admin only (Admin → Danger zone, type RESET).

Please do not file a public issue with exploit details.

Use GitHub private vulnerability reporting so the maintainer can patch before the report is public. If that form is unavailable, contact the maintainer through GitHub.