Roadmap

Shipped, next, later

What's in Keyfold today, what I'm building next, and what Keyfold won't do. Ideas are welcome at support@keyfold.app or @CodeWithKolin.

Shipped in 1.0

  • Projects, environments and keysNotes, tags, expiry warnings, where to rotate.
  • Passwords with 2FA codesCodes computed on your computer.
  • Quick paste⌘⇧K from any app, menu bar recents.
  • MCP server and CLIAgents use keys without seeing values; every request approved.
  • Key detectionClipboard and .env folders, opt-in.
  • Recovery Kit, rolling backups, backup exportA printable code is the only other way in.

Next

  • Touch ID and Windows HelloUnlock without typing; the passphrase is still needed after a restart.
  • Leak check and pre-commit hookFind vault values sitting in your code or git history, and block commits that contain them.
  • Importers1Password, Bitwarden and CSV.

Later

  • YubiKeyA hardware key as a second factor for the vault.
  • Trusted contactsSplit your recovery code between people you trust; any two can help you back in.
  • Folder syncKeep one vault in sync across computers through a folder you already sync, with conflict handling.
  • Browser extensionFill passwords and save new keys from dashboards.

Not planned

  • A Keyfold cloudNo server of mine will ever hold your vault. That is the point.
  • Password reset by emailAnything that can reset your passphrase can open your vault. The Recovery Kit stays with you.
  • A subscription for the appYou pay once. A paid option may come later only for features that need a server, and only if you opt in.