Keyseed

Tiny deterministic secret encryption CLI.

Keyseed is a small local-first CLI for generating deterministic encrypted payloads from a text input and a master key.

If the input and master key stay the same, the output stays the same.

Install

npx

npx keyseed encrypt "efe.facebook" -k "master-key"

global install

npm install -g keyseed
keyseed encrypt "efe.facebook" -k "master-key"

local development

npm install
npx . encrypt "efe.facebook" -k "master-key"

Quick cheatsheet

# encrypt
npx keyseed encrypt "efe.facebook" -k "master-key"

# decrypt
npx keyseed decrypt "hashit:v2:..." -k "master-key"

# use env var
export HASHIT_MASTER_KEY="master-key"
keyseed encrypt "efe.instagram"

Usage

Encrypt

keyseed encrypt "efe.facebook" -k "master-key"

Decrypt

keyseed decrypt "hashit:v2:..." -k "master-key"

Use environment variable

export HASHIT_MASTER_KEY="master-key"
keyseed encrypt "efe.facebook"

Behavior

• same input + same master key => same output
• output format is hashit:v2:...
• old hashit:v1:... payloads still decrypt
• works as an npm/npx command backed by a Rust binary

Development

cargo test
npm run cli -- encrypt "efe.facebook" -k "master-key"

Release notes

The npm wrapper tries to download a matching prebuilt binary from GitHub Releases. If no prebuilt binary exists for the platform, it falls back to building with Cargo.

License

MIT — see LICENSE.