Skip to main content

Opening Settings

Access the settings window using the keyboard shortcut: + , Or select Settings from the app menu.

R2 Credentials Setup

r2Vault requires four essential credentials to connect to your Cloudflare R2 bucket:
1

Account ID

Your Cloudflare account identifier. Find this in the R2 dashboard URL or your Cloudflare account settings.
https://<account-id>.r2.cloudflarestorage.com
2

Access Key ID

The public part of your R2 API token. Generate this from R2 > Manage R2 API Tokens in your Cloudflare dashboard.
3

Secret Access Key

The private part of your R2 API token. This is shown only once when you create the token — store it securely.
r2Vault stores credentials in the macOS Keychain with secure encryption.
4

Bucket Name

The name of the R2 bucket you want to access (e.g., my-uploads, cdn-assets).

Test Connection

After entering your credentials, click Test Connection to verify:
  • Account ID and bucket name are correct
  • Access keys have proper permissions
  • Network connectivity to Cloudflare R2
A successful test shows:
✓ Connected to R2

Custom Domain (Optional)

If you’ve configured a custom domain for your R2 bucket, enter it in the Custom Domain field:
https://cdn.example.com
Include the full URL with https:// scheme. This domain will be used to generate public URLs for uploaded files instead of the default R2 endpoint.

How Custom Domains Work

With a custom domain configured:
  • Without custom domain: https://<account>.r2.cloudflarestorage.com/<bucket>/<file>
  • With custom domain: https://cdn.example.com/<file>
The custom domain is used when:
  • Auto-copying URLs to clipboard after upload
  • Generating presigned download URLs
  • Displaying URLs in the upload history

Multiple Bucket Support

r2Vault can manage multiple R2 buckets from the same or different Cloudflare accounts.

Adding a New Bucket

  1. Open Settings (⌘,)
  2. Select New Connection from the Bucket dropdown
  3. Enter credentials for the new bucket
  4. Click Save
The new bucket is automatically selected and appears in the browser.

Switching Between Buckets

From the Settings window:
1

Open the Bucket picker

Click the Bucket dropdown at the top of the settings form.
2

Select a bucket

Choose from your saved buckets. The bucket name is displayed for each connection.
3

Auto-load

The browser view refreshes automatically to show the selected bucket’s contents.
You can also switch buckets from the menu bar widget — see Menu Bar for details.

Deleting a Bucket Connection

This only removes the credentials from r2Vault — it does not delete the bucket or its contents from Cloudflare.
  1. Select the bucket from the dropdown
  2. Click Delete
  3. Confirm the action
If you delete the currently active bucket, r2Vault automatically switches to the first available bucket.

Credential Storage

All credentials are stored securely in the macOS Keychain using these conventions:
  • Service: com.r2vault.credentials
  • Account: The bucket’s unique UUID identifier
  • Data: Encrypted JSON containing account ID, access keys, bucket name, and custom domain
Source: KeychainService.swift (source: Fiaxe/Services/KeychainService.swift)

Next Steps