How SandCrab Handles Your AWS Credentials

Your AWS credentials are important - here's how they are managed and stored using macOS's built-in security features.

Mac Keychain Storage

SandCrab uses your Mac's built-in keychain - the same secure system that stores your passwords and other sensitive data.

Multiple Profiles

Save different AWS profiles (like work and personal) separately in your keychain. Each set of credentials is stored independently and securely.

Local Only

Your credentials stay on your Mac. SandCrab doesn't send them anywhere - they're only used locally to communicate with AWS.

How SandCrab Manages Your Credentials

Safe Storage

SandCrab uses the Node keytar library to store your credentials in the macOS keychain, providing secure system-level encryption for your sensitive data.

Secure Access

Credentials are loaded securely when needed to communicate with AWS services, and stored safely in your system keychain between sessions.

Mac Security

SandCrab integrates with macOS's built-in security features, using your system keychain to protect your credentials.