Arcana keeps the credentials a developer handles every day in one encrypted local place — instead of scattered across
Arcana keeps the credentials a developer handles every day in one encrypted local place — instead of scattered across .env files, sticky notes, and screenshots.
WHAT YOU GET
• A local vault for any text-based credential — API keys, OAuth tokens, SSH passphrases, .env entries, license keys, webhook signing secrets. Categorise by kind, search instantly, copy with an auto-clearing pasteboard, lock with a master password.
• Import from a project folder. Pick a folder; Arcana reads its text files locally and surfaces API keys, JWTs, and private keys it finds so you can save them to the vault in one click. Common paths like .git and node_modules are skipped automatically.
• Import from a screenshot. Apple Vision OCR runs on-device against your Photos library (or just the Screenshots album). Credentials buried in printout photos or SaaS onboarding shots land in the vault directly. Your images never leave your Mac.
• Touch ID unlock once you've set a master password.
PRIVACY
• 100% local. No cloud sync, no telemetry, no analytics SDK, no background uploads.
• Vault contents are encrypted with AES-GCM using a key derived from your master password (PBKDF2, 600 000 iterations).
• Photo OCR runs on-device using Apple's Vision framework — images never leave your Mac.
PRICING
• Arcana is a one-time Mac App Store purchase. No subscriptions, no in-app purchases, no free trial.
• Every feature is included: the encrypted vault, project-folder and screenshot importers, Touch ID approval for external tools, and the local audit log.
• Pay once on the App Store — the price is shown in your local currency on this product page.
• No ads, no tracking.
Privacy Policy: https://universum.earth/apps/safe/privacy
Terms of Use (EULA): https://www.apple.com/legal/internet-services/itunes/dev/stdeula/
REQUIREMENTS
macOS 14 (Sonoma) or later.
Photo OCR features ask for Photos library access on first use.