Sealrepo
Sign inStart free
Get started

Install the CLI and sign in

This page covers getting the sealrepo command onto a machine and signing in to your free account. Do this once per machine — laptops, desktops, CI runners, anywhere you need to lock or unlock.

Why sign in at all?
sealrepo init, lock, and unlock all require a signed-in CLI — a vault (your encrypted repo) is bound to the account that created it. The account is free with no card; the only command that works signed out is sealrepo unlock --recovery, the offline recovery-code path.

  1. Install from npm

    Sealrepo is published as a single npm package. It needs Node.js 18 or newer.

    Any shell, any OS
    $npm install -g sealrepo
    # Sanity check: should print the version
    $sealrepo --version
    0.2.0
    Don't have npm?
    Install Node.js from nodejs.org. npm comes with it. Both sealrepo and the shorter alias sc are installed.

  2. Pair the CLI with your account

    sealrepo login prints a pairing URL and offers to open it — press ENTER and your browser lands on sealrepo.dev, where you click Approve once. The CLI gets a long-lived bearer token saved to ~/.sealrepo/credentials.json with mode 0600. No password is ever stored on disk.

    In your shell
    $sealrepo login
    Open this URL in your browser to approve this device:
    https://sealrepo.dev/app/cli/pair?code=BX72-PQ4M
    Press ENTER to open in the browser...
    Waiting for approval ⠋
    ✓Paired as [email protected]
    ✓Saved token to ~/.sealrepo/credentials.json

    In the browser tab you'll see the device-code page with a one-tap Approvebutton. No account yet? That page walks you through creating one first — free, no card. We only approve the exact code shown in your terminal — random visitors can't pair without your active terminal session.

  3. Confirm everything works

    Sanity check
    $sealrepo whoami
    Signed in as [email protected]
    device: macbook-pro · darwin-arm64 · cli 0.2.0
    server: https://sealrepo.dev

    If you ever want to undo this on a specific machine — say the laptop got stolen — run sealrepo signout on a machine that still works, or revoke the device from Settings → CLI devices on the dashboard.

Next
Create your first vault
→