Secrets, kept in the shadow.

EclipsVault protects credentials with AES-256-GCM envelope encryption, Argon2id staff authentication, mandatory multi-factor sign-in, attribute-based access control and a fail-closed, immutable audit trail.

• Every reveal is audited before decryption — no audit, no plaintext.
• Honey-token decoys trip an automatic intrusion response.
• Expired secrets are shredded automatically at TTL.