Some things that belong in an infrastructure catalogue are secrets: root passwords, connection strings, SSH keys. Staxy stores them in a vault encrypted on your device.
How the vault works
The vault is protected by a passphrase that only you know. Encryption and decryption happen in your browser or app; the server stores ciphertext it cannot read. The key never leaves your device — it lives in memory, locks itself after inactivity, and clears when you sign out.
Because of that design, a forgotten passphrase cannot be recovered — not by you, not by support. You can reset the vault (erasing the saved secrets while your account and units stay), then set a new passphrase.
What goes in the vault
- Protected information on a unit — any secret text: passwords, tokens, connection strings.
- SSH keys for VPS units.
What stays plain
Names, prices, dates, providers, tags and IP addresses are regular catalogue data — searchable and visible without unlocking anything. Addresses are not secrets; treating them as such only made the catalogue harder to use.
Your data in general
- Your data is yours: a full JSON export of the account is available in Settings (GDPR-grade, machine-readable).
- Pro users can export and import whole infrastructures — moving between accounts keeps units, providers, projects and (re-encrypted) secrets.
- Deleting the account soft-deletes immediately and erases data on schedule; billing stops the same moment.