Claude Vault

claude-vault

[](https://opensource.org/licenses/MIT) [](https://nodejs.org) []()

Encrypt your Claude Code `.md` files at rest. CLAUDE.md, SKILL.md, memory — anything you want private on disk and in git.

The problem

Claude Code stores project instructions, skills, and memory as plain markdown files. If your repo is public (or if someone has access to your machine), they can read your custom prompts, workflows, and business logic. That's not great.

Same goes for AI memory systems like [obsidian-memory](https://github.com/topics/obsidian-memory) — they store session context, API keys, decisions, and project notes as `.md` files in an Obsidian vault. All readable by anyone who opens the folder.

What this does

Locks those files with AES-256-GCM. They stay encrypted on disk and in version control. When you start a Claude Code session, they get decrypted. When the session ends, they lock again.

CLAUDE.md (readable) --[encrypt]--> binary blob (CLVAULT1 header)
                                        |
                    session starts, hook runs decrypt
                                        |
binary blob --------[decrypt]--> CLAUDE.md (readable, temporarily)
                                        |
                    session ends, hook runs encrypt
                                        |
CLAUDE.md (readable) --[encrypt]--> binary blob

Install

npm install -g claude-vault

Quick start

One command does everything — creates config, installs Claude Code hooks, encrypts your files:

export CLAUDE_VAULT_KEY="something-strong-here"
cd your-project
claude-vault setup

That's it. From now on, files decrypt when Claude Code reads them and encrypt when the session ends.

Commands

| Command | What it does | |-----