/
Menu

Glossary

The terms StackHangar uses in the app and in these docs, in plain words.

StackHangar uses one word for each idea. These are the words you will see in the app.

#Your data

Vault. Where your secrets live. Everything in it is encrypted on your device with a key that only your passkeys (or your recovery key) can unlock. See Concepts.

Project. One of your products. Items, accounts and playbook runs are grouped by project. Each project can have a Production, Staging and Development environment. See Projects.

Item. A stored thing in a project: a login, an API key or token, a subscription, a domain, a certificate or a secure note. See Items.

Value. The secret content of an item, such as the text of an API key.

Account. Your login with a provider, such as a Vercel team or a Supabase account. An item points to the account that owns it, so you know which login to use to fix it. You can have several accounts with the same provider. See Accounts.

Provider. A service in StackHangar's catalog, such as Stripe or Vercel. See Providers.

Business. A legal entity you register provider accounts under. Its details are kept encrypted in your vault. See Business profile.

Registered as. The business a provider account is linked to. See Add and edit a business.

Record history. The earlier versions of what you save, kept for 30 days so changes can be undone. See History.

#Unlocking and recovery

Passkey. The way you unlock your vault, such as Face ID, Touch ID, Windows Hello or a security key. You set up at least two. See Passkeys.

Passkey check. A passkey prompt that confirms an action that changes security settings or exposes something, such as removing a passkey or exporting your vault. Being signed in alone is not enough.

Recovery key. A printable key you save at setup. It gets you back in if you lose every passkey. See Recovery key.

Vault key. The one key that encrypts everything in your vault. You can replace it. See Rotate your vault key.

Unlock session. How long your vault stays unlocked across reloads: until you have been idle for the time you choose in Settings, and for at most 12 hours.

Locked. Signed in but not unlocked. You can sign in with an email code or GitHub, but only a passkey opens the vault.

#Alerts and findings

Alert. An email reminder before something expires or needs attention. It says how many items need attention and never names them. See Expiry reminders.

Finding. Something StackHangar thinks needs your attention, such as an expiring key. Fixed rules decide findings. See Findings.

Explain. An optional AI explanation of a finding or a step. It never changes what a finding or a step says.

#Playbooks and delivery

Playbook. A reusable list of steps for a job: launch a product, rotate a key, handle a leaked key or shut a product down. See Playbooks.

Run. One execution of a playbook. A launch is a run of the Launch playbook.

Waiting. A playbook step that cannot be done yet because it depends on an earlier step.

Deploy target. A place a value is sent to, such as a Vercel project, a GitHub repository or a Netlify site. See Deploy targets.

Delivery. One value sent to one deploy target.

Outcomes of a delivery:

  • Sent: the value reached the deploy target.
  • Sent and redeployed: it was sent, and then the deploy target redeployed.
  • By hand: you do the step yourself.
  • Not sent: the send did not happen.
  • Skipped: no send was asked for, or it was not needed.

#Agents

Agent. An AI tool, such as Claude Code or Cursor, that connects to StackHangar through MCP. It gets reference IDs and your approve or deny answers, never a value. See Agents.

Secret request. An agent's request for a value, shown on its approval page for you to answer. See Secret requests.

Approval link. The one-time link an agent gives you to open an approval page in your browser. See Approvals.

#Plans

Free and Solo. The two plans. See Plans.

Activity log. The record of security events on your account. See Activity log.