EONBOT return
Finish the safe step, then return to chat
A reviewed EONBOT action may return you to the same local Chat thread. Vault remains the only place for provider keys and other sensitive settings.
Your secure local workspace
Vault
One calm place for recovery, backup choices, and advanced AI-key settings. Start with one encrypted Capsule. Keep its passphrase separately.
Local-first
Create Capsule
At a glance
Simple by default
Checking the local workspace boundary…
One CapsuleOne compressed-when-useful encrypted file contains all supported local workspace records from this browser.
Manual restoreYou inspect a no-values plan and approve only the changes you choose.
Drive choicesManual encrypted snapshots use separate Drive file permission; optional automatic continuity uses separate hidden app-data permission. Neither reuses ordinary Google Login permission.
Visual collection
Vault Reveals
Keep visual unlock cards separate from recovery, account data, payment, ownership, and security settings.
Account & preferences
Settings stay understandable
Profile, appearance, voice, device and privacy controls live together in Preferences. Account sign-in does not create a backup.
1 · Recovery
Protect your work
Checking the local-first continuity boundary…
This device
Device security
Checking device-bound storage…
Checking local profile state… An installed PWA does not share browser storage with another device by itself. EON Transfer Kit is the manual recovery path; optional Drive continuity must be enabled separately.Keep it safe
What to keep separate
Keep the Capsule and passphrase in separate places. A Capsule intentionally excludes API/provider keys, recovery secrets, wallets, OAuth sessions, raw media, model files and unknown storage.
A recovery rehearsal is guidance only. It never creates a backup, restores data or certifies a device.2 · Cloud backup
Checking Google Drive backup boundary…
Manual storage today
Loading manual encrypted-storage options…
Advanced · AI only
AI provider keys
Checking encrypted provider status…
These are AI-provider settings, not Google Drive backup. Provider names may be shown; secret values are never read or displayed.Advanced · Privacy
Safe status
Checking for known legacy provider storage names…
Advanced · AI only
Verify an AI provider key
Optional bring-your-own-AI setup. A key is entered only in Vault, never in EONBOT. Verification is user initiated and sends the key directly to the provider you choose; EONAPP does not receive it.
Local profile only. Raw provider keys and recovery passphrases are never rendered in Vault status, exports, logs, or receipts.No hosted provider has been verified in this session.
Keys are session-only by default. Unlock uses one passphrase across eligible encrypted entries and can return a partial result when saved providers use different passphrases. Unlock does not verify a provider, choose a model, spend money, or send an AI request. AI provider keys are session-only by default. Restored keys are also time-limited; Lock removes only those restored session grants. Encrypted recovery copies remain saved until you explicitly remove a provider.Safety repair
Legacy AI-key storage migration
Checking whether this browser has a known legacy provider-storage source…
Migration requires the recovery passphrase above and explicit confirmation. It encrypts known legacy AI-provider keys, verifies every write, then removes raw key fields. Provider names and counts may be shown; secret values are never displayed.Loading Vault Reveals…
Plain-language help
Need help?
Ask EONBOT to explain local AI, encrypted storage, or recovery boundaries. EONBOT must never ask you to paste an API key, password, seed phrase, or exchange secret.