✔ Address copied to clipboard
AES-256-GCM · TOTP · Import · Offline-only · Open source

Encrypt anything. Trust no one.

Flux-Tui is a terminal-based encrypted vault. Your files stay on your machine — fully local, zero telemetry, military-grade encryption.

256
bit AES-GCM
12
Core features
0
Telemetry
100%
Offline
FLUX-TUI · Secure Vault · Windows AMD64 ● SECURE
Install
Get Flux-Tui

Free forever. No account. No setup required beyond Python and one pip install.

Source
Full source code archive. Run on any OS with Python 3.10+. Inspect every line before running.
flux-tui.zip · MIT License
Download Zip →
Built for real security

Not another cloud wrapper. Flux-Tui is a proper cryptographic vault — now with full-text search, TOTP, import, a local API, and a tamper-evident audit chain.

01
🔒
AES-256-GCM Encryption

Industry-standard authenticated encryption. Every file gets a unique 96-bit IV. GCM auth tag detects tampering on every decrypt — not just corruption.

02
scrypt Key Derivation

Your master password is hardened with scrypt N=2¹⁷ before any key is derived. Brute force is computationally infeasible — even at nation-state scale.

03
🔍
Full-Text Content Search

search /query decrypts every file in the background and scans for your query with line-number hits and highlighted snippets. Find "which file has my AWS key" in seconds.

04
📲
TOTP 2FA Codes

totp add GitHub <secret> stores your 2FA secrets encrypted in the vault. totp shows all live codes with a countdown bar. Codes turn red when expiring.

05
📥
Import from Competitors

One command to import from Bitwarden JSON, KeePass CSV, or 1Password CSV. Each entry becomes its own encrypted file. Switching vaults takes 30 seconds.

06
🔏
Tamper-Evident Audit Chain

Every encrypt, decrypt, and import event is logged in a SHA-256 hash chain. Each entry covers all previous entries — deletion or modification of any record is instantly detectable.

07
🌐
Local API Server

serve starts 127.0.0.1:27182 with a one-time session token. Browser extensions and scripts can search and copy to clipboard without re-entering your key.

08
Universal Command Palette

Ctrl+P opens a fuzzy launcher for both vault files and commands. Tab switches between modes. Type tot to jump to TOTP. Type rep to find report.pdf. Never leave the keyboard.

09
Live Clipboard Countdown

When you copy a decrypted secret, the status bar shows CLIPBOARD CLEARS IN 23s and counts down in real time. Configurable delay. Automatic wipe — no manual clearing needed.

10
🖥
Terminal-Native TUI

Full-screen interface with inline editor, drag-and-drop encrypt, vault tags, batch import, and an in-terminal file browser. Runs over SSH — your vault follows you to any machine.

11
🔒
Startup Passcode + Auto-Lock

Set a 4-6 digit passcode for the idle timeout lock screen. Master key unlocks on startup; passcode handles re-entry after inactivity. Configurable timeout, lockout after 3 wrong attempts.

12
🎨
22 Animated Themes

Phantom, Matrix, Neon, Ocean, Aurora, Inferno and 16 more. Animated colour palettes that breathe and pulse. All themes are high-contrast with verified readable accent colours.

Principles
Why Flux-Tui?
01

Your files stay yours

Cloud encryption tools can be subpoenaed, breached, or shut down. Flux-Tui has no server to attack — your vault is just files on your drive.

02

No backdoor. No master key.

We cannot recover your password. There is no reset flow, no recovery email, no escrow. If you forget it, the data is gone. That's the point.

03

Open source and auditable

Every line of code is public. Security through obscurity is not security. Read it, compile it, audit it yourself.

04

Free because privacy shouldn't cost money

No tiers. No subscription. No premium features. The full tool, forever, for anyone.

05

Your vault follows you over SSH

The full TUI renders over SSH sessions. Every feature — search, TOTP, editor, themes — works on any remote machine you connect to. No install required on the server.

Technical Specifications
CipherAES-256-GCM
KDF (files)scrypt N=2¹⁷ r=8 p=1
KDF (auth)PBKDF2-SHA256
IV size96-bit random per file
Auth tag128-bit GCM tag
FormatFLUX v2 (.flux)
Audit logSHA-256 hash chain
TOTPRFC 6238 (pyotp)
APIlocalhost only, token-gated
NetworkZero calls (API optional)
TelemetryNone
LicenseMIT / Open source
PlatformWindows 10 / 11
Questions
FAQ