SensitiveDataUnlock

Reusable SensitiveDataUnlock component copied into the TreeSeed UI library.

All components

Component frame

Sensitive Data

Unlock encrypted team data

One passphrase unlocks host credentials and sensitive actions on this page until refresh or navigation.

Team sensitive data passphraseUse the same passphrase for Repository, Web, Capacity provider, and Email host secrets.

Current passphraseReset needs the current passphrase so saved encrypted values can be re-encrypted.New passphraseConfirm new passphrase

Forgot the current passphrase? Existing encrypted provider values cannot be recovered. Create replacement hosts with a new passphrase.

Provider values are encrypted in your browser and are not available to TreeSeed.

Your passphrase stays in this tab's memory only. It is not saved in local storage, cookies, or project metadata. Refreshing or navigating locks the page again.

When you save host credentials, the browser stretches your passphrase with Argon2id, then encrypts the values with XSalsa20-Poly1305 authenticated encryption. Each save uses a fresh salt and nonce, and TreeSeed stores only the encrypted envelope.

Launch and validation actions use short-lived server sessions. The server receives the passphrase only for that unlock request, re-encrypts the provider values for the job/session, and does not return secrets in normal API responses.

Configuration Options

{
  "packageEntry": "@treeseed/ui/components/astro/app/sensitive/SensitiveDataUnlock.astro",
  "defaultProps": {
    "source": "Sensitive Data"
  },
  "configurableProps": [
    {
      "name": "props",
      "type": "object",
      "defaultValue": {},
      "description": "Component-specific props."
    }
  ]
}

Defaults

{
  "source": "Sensitive Data"
}