Use fd0

Documentation

fd0.sh carries the user documentation. These pages cover the normal paths: install, unlock, store secrets, share scopes, sync, SSH, Talos, Kube, recovery, and basic self-hosting. The repository holds the technical specs.

Start here

Install the client, create a vault, store the first secret, and sync.

Desktop app

Download fd0 Desktop for macOS or Linux and see what the app holds.

Concepts

The small vocabulary used by every fd0 command.

Daily use

One grammar for every module, plus scopes, sharing, and health checks.

Passwords

Browser extension

Install fd0 for Chrome and fill HTTPS logins without submitting the form.

SSH and files

Scope-shared SSH hosts, terminal sessions, and two-way SFTP transfers.

Talos and Kube

Store, render, merge, and share Talos and Kubernetes configs.

Sync

What sync sends, what it verifies, and how automatic refresh works.

Self-host

Run a primary, add a DR backup, and know where the full runbook lives.

Troubleshooting

Locked vaults, stale SSH sockets, missing hosts, and config refresh.

The normal path

$ curl -fsSL https://fd0.sh/install | sh
$ fd0 init
$ fd0 unlock
$ fd0 scope create --label work
$ fd0 secret set DEPLOY_KEY "ghp_xxxxxxxxxxxxxxxxxxxx" --scope work
$ fd0 sync
$ fd0 secret get DEPLOY_KEY --scope work

Prefer a window? fd0 Desktop covers the same vault on macOS and Linux, and the installer can put the app, the CLI, and the agent on the machine in one step.

Where details live

Use these pages when you want to operate fd0. Use /spec or the GitHub files when you need exact wire formats, storage invariants, threat IDs, or benchmark baselines.

Concepts