API Key Manager is a secure, client-side API key organizer built entirely with pure HTML, CSS, and JavaScript. No server, no database, no backend setup — just open the file and it works instantly in any modern browser. It lets developers, freelancers, and teams store, organize, search, and protect all their API keys in one place.

All data is stored in your browser’s localStorage and never leaves your device unless you export it manually. No accounts, no subscriptions, no internet dependency after the first load.

Key Features

Core Key Management

Add, Edit & Delete Keys — full key management with name, value, category, vault, notes, tags, and expiry date
Search & Filter — instantly search by name, filter by category or vault, and sort by date or name
Bulk Actions — select and delete multiple keys at once
Key Strength Meter — automatically rates each key as Weak, Fair, Good, or Strong
Auto-Hide Keys — key values are masked by default and auto-hide after a configurable timeout
Expiry Dates — set expiry dates per key; overdue warnings appear automatically
Tags — label keys as Production, Development, Staging, Test, and more
Activity Log — tracks the last 50 actions including adds, copies, deletes, and exports

Security

AES-256-GCM Encryption — encrypt all stored keys with a master password using the browser’s native Web Crypto API (PBKDF2 key derivation with 200,000 iterations + AES-GCM). No third-party crypto libraries involved
PIN / Password Lock Screen — full-page lock overlay on every app load; supports both numeric PIN and full passwords
5-Attempt Lockout — short lockout delay kicks in after 5 failed unlock attempts
Zero Server Communication — keys are never transmitted over any network

Organization

8 Built-in Categories — Payment, Cloud, Social Media, Database, Analytics, AI/ML, Messaging, Other
Custom Categories — add, rename, and delete your own categories from within the app; built-in ones are protected
Vaults (Key Groups) — organize keys into named, color-coded vaults for project-level separation (e.g. “Client A”, “My Startup”, “Personal”)

Export & Backup

Export to JSON — full backup of all keys, including vault and category data
Export to CSV — opens in Excel or Google Sheets; includes name, key value, category, vault, tags, strength, expiry, and notes
Import from JSON — restore from backup with Merge (keep existing keys) or Replace (overwrite) mode

PWA & Offline Support

Progressive Web App (PWA) — install on desktop or mobile as a standalone app, directly from the browser
Full Offline Use — service worker caches all app files on first load; works with zero internet after that
Add to Home Screen — works on Android (Chrome) and iPhone (Safari)

User Experience

Light & Dark Mode — toggle between themes; preference is saved across sessions
Fully Responsive — works seamlessly on phones, tablets, and desktops
Configurable Settings — auto-hide delay, date format, confirm-delete prompts, usage count tracking, and more
No Installation Required — no npm, no terminal, no build step; just upload and open

Technologies Used

HTML5 — semantic, standards-compliant markup
CSS3 — custom properties, CSS Grid, Flexbox, animations, and responsive breakpoints
Vanilla JavaScript (ES6+) — zero frameworks, zero dependencies, modular code structure
Web Crypto API — native browser encryption; PBKDF2 key derivation and AES-256-GCM encryption
localStorage API — all data persisted directly in the browser
Service Worker API — cache-first strategy for full offline capability
PWA Manifest — installable as a standalone desktop or mobile app
Font Awesome — icon set used for category and vault icons
Google Fonts (Inter + Fira Code) — clean UI typography and monospaced code font

Browser Compatibility

API Key Manager Pro works on all modern browsers that support the Web Crypto API and Service Workers:

Google Chrome (desktop & Android) — recommended
Mozilla Firefox (desktop & Android)
Microsoft Edge (Chromium-based)
Safari (macOS & iOS 16+)
Opera (Chromium-based)
Brave

Requirements

A modern web browser (see compatibility list above)
For PWA install: the app must be served over HTTPS
No PHP, no Node.js, no server-side language, no database required
Works locally by simply opening index.html, or uploaded to any static hosting (cPanel, Netlify, GitHub Pages, etc.)

API Key Manager | HTML5 Management Tool