ov app

An app is a named container for secrets belonging to a single project or service. When you have multiple projects, each gets its own app so secrets with the same name never collide.

Commands

Command	Description
`ov app create <name>`	Create a new app
`ov app list`	List all apps
`ov app use <name>`	Set the default app for all commands
`ov app delete <name>`	Delete an app and all its secrets

ov app create

ov app create my-saas
ov app create payments-service

Creates a new app. App names must be unique per account and can contain letters, numbers, and hyphens.

ov app list

ov app list

Output:

NAME              SECRETS  CREATED
my-saas           14       2026-04-01
payments-service  3        2026-04-08
default           2        2026-03-20

ov app use

ov app use my-saas

Sets my-saas as the default app for all subsequent commands in any directory. Stored in ~/.config/ov/config.toml. Override per-command with --app.

ov app delete

ov app delete my-saas --confirm

Permanently deletes the app and all secrets in it. This cannot be undone. Requires --confirm.

On first login, OpaqueVault creates a default app so you can start storing secrets immediately without any setup. You can run ov app use my-saas to switch to your own app at any time.

ov secret — store and manage secrets in an app
ov run — run commands with secrets injected