v1.3.0
Keyper 1.3.0
Accounts, owner-scoped database rules, and stronger key storage
Keyper now signs you in to a real account before opening your vault, and the database checks that account on every request. Your vault key is stored encrypted under your master passphrase, so a copy of the database cannot decrypt anything on its own.
Existing installs need a one-time database update. Enable Email auth in Supabase, then run the five scripts in migration/ one at a time, in order. Back up first. Keyper detects an un-migrated database on startup and walks you through it.
Please note: The master passphrase can no longer be reset, so keep a copy somewhere safe. If you ran Keyper on a public URL, refresh any credentials you stored during that time once you have migrated.