You store your secrets
You type or import things like a database password, an API key, or your .env file. MOTI organizes them into vaults, like separate drawers.
Without the jargon
How MOTI works
MOTI is a digital safe for your passwords, API keys, and configuration variables. You hold the key; the server only stores locked boxes.
MOTI locks them on your device
Before sending anything, your browser turns each secret into unreadable text. It is like locking the safe before leaving home.
The server stores locked boxes
MOTI can sync your vaults, but it only receives unreadable data. It never receives your secrets or password, so it cannot read them for you.
You open them when needed
When you sign in, your password unlocks the keys in your browser. Secrets become readable only on your device and are locked again when saved.
Each vault has its own key
Production, testing, and development can use different keys. If one box has a problem, the others remain separate.
MOTI
The idea in one sentence
MOTI helps you store secrets without handing them to the server: it locks them in your browser, and only you can open them.
For the technical detail
Your password creates a key-encryption key (KEK), which protects one decryption-key key (DEK) per vault. The DEK encrypts values with AES-256-GCM. The acronyms are simply technical names for these two layers.
Important: keep your password and recovery file safe. If you lose both, MOTI cannot open your vaults for you.