Getting Started with Cirklu: A Complete Guide

Securing your API keys shouldn't be complicated. This guide will walk you through everything you need to know to get started with Cirklu.

Installation (30 seconds)

Step 1: Install the Extension

1. Visit cirklu.com
2. Click "Add to Chrome"
3. Approve permissions (we only need access to input fields)

Step 2: Set Your Master Password

1. Click the Cirklu icon in your toolbar
2. Create a strong master password (12+ characters recommended)
3. Confirm and save

That's it! You're ready to secure your API keys.

Your First API Key

Let's save your first key using Cirklu. We'll use a Stripe test key as an example.

Method 1: Automatic Detection (Recommended)

This is the fastest way to save keys:

1. Get your API key from any provider (Stripe, OpenAI, AWS, etc.)
2. Paste it into any input field on any website
3. Cirklu detects it automatically and shows a popup
4. Click "Save" and give it a name
5. Done! Your key is encrypted and stored

Example: Copy this Stripe test key and paste it anywhere:

pk_test_51RtyN7AtkSu2IgOvrzoStG06heu16v89GiB8vntqTLKle4uzBrFaVjmgwD0CUqpFzxUATGHZNIzA5p4TiYSNP9aq00CXeCMfP6

Cirklu will detect it's a Stripe key and offer to save it.

Method 2: Manual Entry

For keys you already have stored elsewhere:

1. Click the Cirklu icon in your toolbar
2. Click "Add Key" button
3. Enter details:
   • Name: "My Stripe Key"
   • Provider: Select from dropdown (Stripe, OpenAI, AWS, etc.)
   • Key: Paste your key
   • Environment: Production or Test
4. Click "Save"

Using Your Keys

Auto-Fill (Smart Detection)

Cirklu automatically detects API key fields and shows a paste button:

1. Navigate to any site with an API key field (Stripe Dashboard, OpenAI Playground, etc.)
2. Look for the Cirklu paste button (appears automatically next to the field)
3. Click it to select your key
4. Done! Key is injected securely without touching your clipboard

Command Palette (Power Users)

For faster access, use the keyboard shortcut:

1. Click any input field where you want to paste a key
2. Press Ctrl+K (or Cmd+K on Mac)
3. Type to search your keys by name or provider
4. Press Enter to paste
5. Done! Lightning-fast key access

Pro tip: The command palette remembers your most-used keys and shows them first.

Security Features

Session Locking

Cirklu automatically locks after 15 minutes of inactivity:

• Locked state: Keys cannot be accessed
• Unlock: Click extension icon, enter master password
• Auto-lock: Configurable in settings (5, 15, 30, or 60 minutes)

Why this matters: If you step away from your computer, your keys are protected.

Secure Sharing

Need to share a key with a teammate?

1. Right-click any key in the extension
2. Select "Share"
3. Set passphrase (required, minimum 8 characters)
4. Set expiration (1-72 hours)
5. Copy link and share

Security best practice: Share the link via email and the passphrase via Slack/SMS. This ensures two-factor verification.

Example:

• Email: "Here's the API key link: https://cirklu.com/share/abc123..."
• Slack: "Passphrase is: SecurePass2025"

The recipient visits the link, enters the passphrase, and saves the key to their Cirklu extension.

Best Practices

✅ DO:

• Use a strong, unique master password (not used anywhere else)
• Enable session auto-lock (15 minutes recommended)
• Regularly review saved keys (delete unused ones)
• Use secure sharing for team collaboration
• Keep the extension updated (automatic in Chrome)
• Use different keys for development and production

❌ DON'T:

• Share your master password (not even with teammates)
• Store your master password in a file or password manager
• Disable auto-lock for convenience (security > convenience)
• Share keys via plaintext channels (use Cirklu's secure sharing)
• Reuse the same key across multiple environments

Keyboard Shortcuts

• Ctrl+K / Cmd+K - Open command palette (in any input field)
• Ctrl+Shift+K / Cmd+Shift+K - Open extension popup
• Esc - Close command palette

Troubleshooting

"Extension not detecting my key"

Solution: Cirklu detects common API key patterns (Stripe, OpenAI, AWS, etc.). If your key isn't detected:

1. Use manual entry instead
2. Email us at connect@cirklu.com with the provider name (we'll add support)

"Session locked, can't access keys"

Solution: This is by design for security.

1. Click the Cirklu icon in your toolbar
2. Enter your master password
3. Keys will be accessible again

"Forgot master password"

Solution: Unfortunately, there's no recovery (by design for security).

• You'll need to reset the extension (right-click icon → Options → Reset)
• Re-add your keys manually
• This is why zero-exposure is secure—even we can't recover your password

"Paste button not appearing"

Solution:

1. Ensure the extension is enabled (check Chrome extensions page)
2. Refresh the page
3. Try the command palette (Ctrl+K) instead

Advanced Features

Key Organization

• Search: Use the search bar in the popup to find keys quickly
• Filter by provider: Click provider badges to filter
• Sort: Keys are sorted by most recently used

Rename Keys

1. Click the key in the extension popup
2. Click the edit icon
3. Change the name
4. Click save

Delete Keys

1. Right-click the key in the extension popup
2. Select "Delete"
3. Confirm deletion

Warning: Deleted keys cannot be recovered. Make sure you have the key saved elsewhere if you still need it.

Next Steps

Now that you're set up:

• Secure all your API keys - Go through your .env files and save them to Cirklu
• Delete plaintext keys - Remove API keys from .env files (add to .gitignore)
• Share with your team - Invite teammates to use Cirklu for secure collaboration
• Explore settings - Customize auto-lock timing, themes, and more
• Try the hack challenge - Test Cirklu's security at /challenge

Resources

• Security Audit - Deep dive into our encryption
• Hack Challenge - Earn equity by finding bugs
• FAQ - Common questions answered
• Roadmap - See what's coming next

Questions? Email us at connect@cirklu.com

---

Ready to secure all your API keys? Install Cirklu today and experience zero-exposure key management.