Sigyn – OSS native macOS secrets manager to replace .env (GUI+CLI)
Touch ID auth and Keychain integration beat 1Password's env tool on local-first workflow.

Yet another secret manager competing with Doppler and Infisical.
Development teams, freelancers, startups
Doppler · Infisical · AWS Secrets Manager
Now everything lives in a local file that I can pull and push with a simple CLI command. I never have to think about it again.
The tool is also useful when you’re hiring freelancers who need access to staging or local environment variables for testing. Instead of handing over an entire .env file, only to have it linger for months and expose keys and passwords, you can share just the specific file or variable you want (e.g., only the database URL, not the password). When you need to rotate or change anything, press the sync button and the tool updates all environments automatically.
I use it daily and rarely log in just to edit a variable or .env key; a single click does the job.
If you work with multiple projects, devices, or freelancers, give it a try. I spent a lot of time securing and encrypting the secrets so they can’t be leaked. I’d love to hear your feedback.
Touch ID auth and Keychain integration beat 1Password's env tool on local-first workflow.
Stops AI tools from reading .env files by never storing secrets as plaintext on disk.
KMS encryption that keeps secrets out of process.env entirely.
Yet another .env replacement; Doppler and Infisical already own this space.
Rust WASM bindings enforce type safety for age-encrypted secrets in the browser.
Touch ID for ENV secrets is clever, but dotenvx and 1Password CLI already solve this.