# ValetFS — Secrets your agent can't keep

> Secrets your agent can't keep (iPhone/iPad app by Youngjune Kwon.)

- Source: https://appshunter.io/ios/app/valetfs/id6804526734 (this page in markdown: same URL + `.md`)
- Developer: [Youngjune Kwon](https://appshunter.io/developer/401877953)
- Category: Developer Tools, Utilities
- Price: Free
- Age rating: 4+
- Requires: iOS 15.1 · 32 MB
- Languages: American English, Arabic, French (France), Japanese, Korean, Chinese (Simplified, China), European Spanish
- Released: 2026-08-31
- Data updated: 2026-09-20
- User reviews in markdown: https://appshunter.io/ios/app/valetfs/id6804526734/reviews.md

## What is ValetFS?

AI agents and build tools need your API keys. Handing them over usually means
writing them into a dotfile, an environment variable or a config directory —
where they sit forever, readable by anything on the machine, long after the job
is done.

ValetFS is the other way round. Your secrets live on your iPhone, in the
Keychain, behind Face ID. When a tool on your computer needs one, ValetFS lends
it — into memory, never to disk — and takes it back when you are finished.

HOW IT WORKS

• Install the ValetFS daemon on your computer and start it. It prints a QR code.
• Scan the code with the app. The two are now paired.
• Push a secret from your phone. It appears on the computer as an ordinary file
  that any tool can read — but it exists only in memory.
• Close the app, and a grace timer starts. When it expires the daemon unmounts
  and wipes itself. Nothing is left behind on disk.

END-TO-END ENCRYPTED

Secrets are encrypted on your phone for one specific daemon, using X25519 key
agreement and ChaCha20-Poly1305. The relay that carries them sees only
ciphertext. We cannot read your secrets, and neither can anyone operating the
infrastructure in between.

BUILT FOR AGENTS

Provision a session from the app and hand an AI agent a single connection key.
The agent installs the daemon and joins — and you keep the authority to revoke
it. One tap forgets the session, and a still-running daemon locks itself,
unmounts, and wipes its memory.

NO ACCOUNT, NO TRACKING

There is no sign-up and no login. No analytics SDK, no advertising, no
behavioural tracking. The app is a client for infrastructure you can inspect —
the daemon and the relay are both open source.

REQUIRES A COMPUTER

ValetFS is a companion to the ValetFS daemon, which runs on macOS or Linux and
is a free open-source download. The app on its own has nothing to pair with.

Daemon and source: https://github.com/WinM2M/valet-fs


## Version history (last 4 releases)

### 1.1.2 — 2026-09-10

Sessions between this app and your daemon are now mutually authenticated.
The daemon learns which vault is talking to it and accepts only the identity you
authorised, so nothing else can take its place — and the connection key you hand
to an agent names that identity, which removes the window where a first
connection had to be taken on trust.

Pairing is gated by a secret carried in the QR code rather than by the session
ID, which is printed to terminals and ends up in logs.

Also: reconnecting no longer reports a handshake in progress as an error, and a
vault that loses signal can get back in.

### 1.1.1 — 2026-09-08

• The session screen now tells you when your secrets will go, not just how long the window is — “if this disconnects now, they are wiped around 10:21 PM on Sep 13”.

• Back up your vault. Every secret and its path, sealed into one encrypted file with a passphrase you choose, and restored the same way.

• Backup passphrases now start at eight characters.

### 1.1.0 — 2026-09-04

Seven languages. ValetFS now follows your device language in English, Korean, Japanese, Chinese, Spanish, French and Arabic.

Vault and Daemons are separate tabs. Your secrets and your paired machines no longer share one crowded screen, and the app opens on Daemons so you can see at a glance what is serving.

Optional iCloud Keychain sync. Turn it on and your vault follows you to your other devices, still end-to-end encrypted and still behind Face ID. It stays off until you ask for it.

The grace window is visible. You can see how long a daemon stays unlocked, and choose it.

ValetFS Pro. A one-time purchase, no subscription and no account, that lifts the free limits of 3 secrets and 1 daemon and unlocks iCloud Keychain sync, the grace-window control, and importing secrets from Files or Drive. End-to-end encryption, Face ID and remote wipe stay free, and reaching a free limit never makes an existing secret unreadable. The daemon and the command line tool remain open source and free.

Smaller fixes: back buttons now say where they go, the vault list refreshes as it changes, and the running version is stamped at the bottom of the screen.

### 1.0 — 2026-08-31

No release notes.

---

*Data collected daily from the US App Store and indexed by [AppsHunter](https://appshunter.io/). User reviews are verbatim App Store reviews. Ratings, prices and chart positions refresh continuously; this snapshot is from 2026-09-20.*