Connected accounts
Link the accounts you post to. Credentials are encrypted before they touch disk, and never shown back to you once saved.
◎
Needs an Instagram Business account linked to a Facebook Page, plus a Meta developer app with instagram_content_publish permission.
♪
TikTok
Not connectedDirect posting uses TikTok's Content Posting API, which requires an approved developer app (audit needed before going live).
How storage works. Posting needs live tokens the app sends to each platform, so they can't be one-way hashed — they're encrypted at rest with a key held on this machine. Anyone with both the key file and the vault could read them, so keep this machine secure and never share secret.key.