Tuck

Tuck is a small, self-hosted vault for SSH keys, hosts and files. Everything is encrypted in the browser before it reaches the server, so an instance only ever holds ciphertext and whoever runs it cannot read what is inside. Unlocking takes a password and then three questions you wrote yourself, with each answer forming part of the key, and there is deliberately no recovery path. One download sets up ~/.ssh on any machine, so moving to a new laptop is a single step rather than an afternoon of copying keys around. Each instance keeps one account and sign-up closes after the first, which makes it a personal vault rather than a service to sign up for.