Updated October 17, 2026.
Agreement
Use Keyhelm only with systems and data you are authorized to access. Versions distributed through Apple’s App Store are also licensed under Apple’s Standard Licensed Application End User License Agreement.
What Keyhelm provides
Keyhelm is an independent iPhone app for your HashiCorp Vault servers. It does not provide a Vault server, account, hosted relay, backup service, or guarantee of compatibility. Capabilities depend on the exact Vault version and edition, authentication configuration, enabled engines, and your account’s permissions. Keyhelm is being prepared for release and is not yet available on the App Store.
Keyhelm Pro
Access to the Vault workspace requires Keyhelm Pro. Release offers include monthly and annual subscriptions and a lifetime non-consumable purchase. The native purchase interface displays the current localized price, duration, and applicable terms before purchase. Subscriptions renew automatically unless cancelled through your Apple account. Restore Purchases recovers eligible prior purchases. Purchase access does not authenticate you to Vault or change your server permissions.
Development and test builds use RevenueCat’s Test Store, where purchases are simulated and no real money is charged. Test access does not transfer to an App Store purchase. No introductory trial is offered.
Acceptable use and operational actions
Do not access systems without permission or bypass their controls. Vault decides whether each request is allowed. Review the server, namespace, secret path, version, and consequence before submitting an action. Creating, changing, deleting, or destroying data can affect other users and services. Permanently destroyed data may not be recoverable.
Your responsibilities
You are responsible for your Vault deployment, network access, credentials, permissions, backups, and operational recovery. An accepted request is not a guarantee that a later verification succeeded. A connection timeout can leave an operation’s outcome uncertain; inspect Vault before repeating an action with side effects. Removing a local connection does not revoke its remote token or delete server data.
Availability and rights
No warranty of uninterrupted operation, recovery of lost data, or universal server compatibility is made. Nothing in these terms limits rights that applicable law does not permit us to limit. Keyhelm is not affiliated with or endorsed by HashiCorp.