EONBOT return
Finish the safe step, then return to chat
A reviewed EONBOT action may return you to the same local Chat thread. Vault remains the only place for provider keys and other sensitive settings.
Your secure local workspace
Vault
One calm place for recovery, backup choices, and advanced AI-key settings. Start with one encrypted Capsule. Keep its passphrase separately.
Local-first
Create Capsule
At a glance
Simple by default
Checking the local workspace boundary…
One CapsuleOne compressed-when-useful encrypted file contains all supported local workspace records from this browser.
Manual restoreYou inspect a no-values plan and approve only the changes you choose.
Drive snapshotsGoogle Drive uses a separate encrypted-snapshot permission and never reuses ordinary Google Login permission.
Visual collection
Vault Reveals
Keep visual unlock cards separate from recovery, account data, payment, ownership, and security settings.
Account & preferences
Settings stay understandable
Profile, appearance, voice, device and privacy controls live together in Preferences. Account sign-in does not create a backup.
1 · Recovery
Protect your work
Checking the local-first continuity boundary…
This device
Device security
Checking device-bound storage…
Checking local profile state… An installed PWA does not share browser storage with another device. A reviewed encrypted Capsule is the current transfer path.Keep it safe
What to keep separate
Keep the Capsule and passphrase in separate places. A Capsule intentionally excludes API/provider keys, recovery secrets, wallets, OAuth sessions, raw media, model files and unknown storage.
A recovery rehearsal is guidance only. It never creates a backup, restores data or certifies a device.2 · Cloud backup
Checking Google Drive backup boundary…
Manual storage today
Loading manual encrypted-storage options…
Advanced · AI only
AI provider keys
Checking encrypted provider status…
These are AI-provider settings, not Google Drive backup. Provider names may be shown; secret values are never read or displayed.Advanced · Privacy
Safe status
Checking for known legacy provider storage names…
Advanced · AI only
Verify an AI provider key
Optional bring-your-own-AI setup. A key is entered only in Vault, never in EONBOT. Verification is user initiated and sends the key directly to the provider you choose; EONAPP does not receive it.
Local profile only. Raw provider keys and recovery passphrases are never rendered in Vault status, exports, logs, or receipts.No hosted provider has been verified in this session.
Keys are session-only by default. A recovery copy is created only with your passphrase, which is never stored. Refresh available models is explicit and uses only the selected provider's current session key; it never downloads a local model or changes providers. Saving does not authorise EONBOT, and Google Drive backup never exports provider keys.Safety repair
Legacy AI-key storage migration
Checking whether this browser has a known legacy provider-storage source…
Migration requires the recovery passphrase above and explicit confirmation. It encrypts known legacy AI-provider keys, verifies every write, then removes raw key fields. Provider names and counts may be shown; secret values are never displayed.Loading Vault Reveals…
Plain-language help
Need help?
Ask EONBOT to explain local AI, encrypted storage, or recovery boundaries. EONBOT must never ask you to paste an API key, password, seed phrase, or exchange secret.