Security Architecture

How Aura OS secures your Web3 journey.

Aura Vault (AES-256)

All private keys, API secrets, and sensitive configuration are encrypted at rest using military-grade AES-256-GCM encryption. The vault can only be decrypted locally by your master password.

Silent Security

To protect against physical shoulder surfing and screen recording, all credential inputs in the terminal are completely silent—not even asterisks are printed when typing your password.

Privacy Sanitizer

Before any transaction intent or command history is synced to your cloud dashboard for activity tracking, it runs through the Aura Privacy Sanitizer.

  • Identifies and redacts Ethereum private keys (64 char hex strings)
  • Identifies and redacts API keys
  • Identifies and redacts 12/24 word seed phrases

Vulnerability Disclosure

If you believe you have found a security vulnerability in Aura OS, please contact us privately before public disclosure.