System vault

Secrets that could give access to your cloud accounts are stored in the macOS Keychain, protected by its own encryption and your login password. You can inspect them at any time with the Keychain Access app.

Every item is stored under the service name Freeleapp. The item’s account field tells you what the secret is, for example <session-id>-iam-user-aws-session-access-key-id.

Items created by Leapp (service name Leapp) are copied to Freeleapp the first time Freeleapp needs them, see Moving from Leapp.

Freeleapp talks to the keychain through keytar.