Hacker GitHub

← All repos

maxgoedjen/secretive

View on GitHub ↗ ★ 9,218 Swift

Protect your SSH keys with your Mac's Secure Enclave

43 mentions on Hacker News by 34 people: 5 stories, 38 comments · first 2020-06-27 · latest 2026-10-20

Mentions per year 43 mentions · busiest year 2022 (13)
20082026
AllStoriesComments NewestTopOldest
  1. Or you could just use Secretive. https://github.com/maxgoedjen/secretive
    comment by colesantiago · 2026-10-20 · in SSH Keys on macOS with Touch ID
  2. …every server and client is even more so. (Also, this wouldn’t work with HSM-backed key stores like https://github.com/maxgoedjen/secretive :-)
    comment by notpushkin · 2026-07-23 · in Late.sh – a command-line Clubhouse for computer people
  3. …issues in the past with it. If you're on a Mac, I can highly recommend you to check out Secretive https://github.com/maxgoedjen/secretive
    comment by Myzel394 · 2026-05-12 · in Postmortem: TanStack NPM supply-chain compromise
  4. …store your private SSH key in the secure enclave, there's even an SSH agent that does that for you: https://github.com/maxgoedjen/secretive But that's it. Anything more complicated is not possible. You can't even upload your existing key…
    comment by cyberax · 2025-09-19 · in Apple: SSH and FileVault
  5. You have an option to keep your SSH key in the Secure Enclave behind TouchID or YubiKey https://github.com/maxgoedjen/secretive
    comment by leshenka · 2025-08-31 · in Is it possible to allow sideloading and keep users safe?
  6. …like mlkem768×ecdsa-sha2-nistp256, in a way that the ECDSA part is performed by the SE? [1]: https://github.com/maxgoedjen/secretive
    comment by notpushkin · 2025-08-11 · in OpenSSH Post-Quantum Cryptography
  7. …the security implications that carries). And the way it does that breaks a popular macOS SSH agent: https://github.com/maxgoedjen/secretive/issues/543
    comment by CGamesPlay · 2025-02-08 · in VSCode’s SSH agent is bananas
  8. …I could find the issue for that but I didn't, when I looked just now. :-\ Oh, here's that issue: https://github.com/maxgoedjen/secretive/issues/77 1Password definitely acts weird for me, to where I kind of wonder if the .app folder is…
    comment by pxc · 2024-08-01 · in Our audit of Homebrew
  9. …manager (kinda like apt/rpm on Linux). * Secretive - Stores SSH keys in the secure enclave [ https://github.com/maxgoedjen/secretive ] * Alfred - Better spotlight [ https://www.alfredapp.com/ ] * Hazel - File automations […
    comment by 8fingerlouie · 2024-06-10 · in Ask HN: What macOS apps/programs do you use daily and recommend?
  10. The Secretive SSH Agent uses it to store SSH keys: https://github.com/maxgoedjen/secretive
    comment by throwitaway1123 · 2024-06-08 · in Apple to Debut 'Passwords' App, in Competition with 1Password, LastPass
  11. …is even better but comes with limitations on both client and server, which makes life tough. [0] https://github.com/maxgoedjen/secretive
    comment by KAMSPioneer · 2024-06-07 · in OpenSSH introduces options to penalize undesirable behavior
  12. …way of unexpected Touch ID prompt. It’s a feature I miss when using my Windows/Linux laptop. [0]: https://github.com/maxgoedjen/secretive
    comment by jwells89 · 2024-03-16 · in Ovid's myths of macOS: password entry dialogs and the death of Semele
  13. For Macs: https://github.com/maxgoedjen/secretive
    comment by alwillis · 2023-12-10 · in SSH keys stolen by stream of malicious PyPI and NPM packages
  14. At this point, everyone needs to switch to https://github.com/maxgoedjen/secretive
    comment by upon_drumhead · 2023-12-10 · in SSH keys stolen by stream of malicious PyPI and NPM packages
  15. Secretive might be what you're looking for: https://github.com/maxgoedjen/secretive
    comment by keybits · 2023-09-25 · in Passkeys are generally available
  16. …in addition the network monitoring called out in the article. Defense in depth, and all that. [1] https://github.com/maxgoedjen/secretive [2] https://unix.stackexchange.com/questions/705144/unlock-an-ss... [3]…
    comment by g1a55er · 2023-09-15 · in Zero Effort Private Key Compromise: Abusing SSH-Agent for Lateral Movement
  17. …you should be securely storing your key in a HSM. On Mac, that's easy to do via the Secure Enclave: https://github.com/maxgoedjen/secretive
    comment by walth · 2023-08-23 · in An excruciatingly detailed guide to SSH (but only the things I find useful)
  18. https://github.com/maxgoedjen/secretive > Secretive is an app for storing and managing SSH keys in the Secure Enclave
    comment by upon_drumhead · 2023-06-30 · in Tell HN: 1Password 8.10.8 update corrupted data
  19. put your private key in something like Secretive: https://github.com/maxgoedjen/secretive
    comment by xrisk · 2023-06-27 · in macOS command-line tools you might not know about
  20. …functionality on Mac. Unfortunately it doesn't support RSA keys we have to use for various reasons. https://github.com/maxgoedjen/secretive/issues/10
    comment by obscurette · 2023-03-10 · in Secretive: Store SSH Keys in the Secure Enclave
  21. You can store them in the Secure Enclave on OSX and require TouchID to use the key for signing. See: https://github.com/maxgoedjen/secretive
    comment by EthicalSimilar · 2023-01-28 · in Russhian Roulette: 1/6 chance of posting your SSH private key on pastebin
  22. …IT spend, there's Secretive [1], although it lacks a way to prove that a key is hardware backed. https://github.com/maxgoedjen/secretive
    comment by xmodem · 2022-11-27 · in SSHGuard
  23. ….obdev.at/products/littlesnitch/index.html [3] https://objective-see.org/products/knockknock.html [4] https://github.com/maxgoedjen/secretive
    comment by heywoodlh · 2022-11-26 · in Finch: An open-source client for container development
  24. …tool to store SSH private keys in the Secure Enclave, kind of like what can be done with a YubiKey: https://github.com/maxgoedjen/secretive I've been looking for something like this for 3-4 years but only found it six months ago (in an HN…
    comment by epistasis · 2022-08-26 · in Use TouchID to Authenticate Sudo on macOS
  25. …to be authorised locally - and even if TouchID is disabled, you are notified if a key is used. [0] https://github.com/maxgoedjen/secretive/
    comment by cassianoleal · 2022-08-18 · in A sane SSH(1) key management example
  26. …the Mac’s Secure Enclave [1] or a Yubikey, preferably with Touch ID or touch confirmation on a YK. https://github.com/maxgoedjen/secretive
    comment by danieldk · 2022-08-13 · in The Zoom installer let a researcher hack his way to root access on macOS
  27. Or in the Secure Enclave on Macs. https://github.com/maxgoedjen/secretive
    comment by danieldk · 2022-08-13 · in The Zoom installer let a researcher hack his way to root access on macOS
  28. …need syncing, there are already apps for storing SSH keys in the Secure Enclave, such as Secretive: https://github.com/maxgoedjen/secretive
    comment by comex · 2022-06-07 · in Apple Passkey
  29. …biometric prompt whenever pushing or pulling. All together it’s extremely smooth and unfussy. [0]: https://github.com/maxgoedjen/secretive
    comment by kitsunesoba · 2022-05-31 · in Git Fork: A fast and friendly Git client for Windows and Mac
  30. …license? Also, newer Macs have a Secure Enclave (supports 256-bit secp256r1 ECC keys): https://github.com/maxgoedjen/secretive [storing and managing SSH keys in the Secure Enclave [...] or a Smart Card (such as a YubiKey)]…
    comment by password4321 · 2022-05-06 · in Apple, Google and Microsoft Commit to Expanded Support for FIDO Standard
  31. …YubiKeys) and has a nice native UI for managing multiple keys. [0]: https://git-fork.com/ [1]: https://github.com/maxgoedjen/secretive
    comment by kitsunesoba · 2022-03-08 · in A brief reflection on Mac software stagnation
  32. I'd rather use Secretive ( https://github.com/maxgoedjen/secretive ), to be honest. I've stopped using 1Password everywhere I can due to their product "focus", and am working my way through a set of alternatives (currently using Secrets on…
    comment by rcarmo · 2022-02-16 · in 1Password for SSH and Git (Beta)
  33. …UI they’re losing the attention to detail and polish that used to be a major selling point. [0]: https://github.com/maxgoedjen/secretive
    comment by kitsunesoba · 2022-02-16 · in 1Password for SSH and Git (Beta)
  34. On modern Macs, you can also use the Secure Enclave for SSH private keys: https://github.com/maxgoedjen/secretive
    comment by danieldk · 2022-01-26 · in Guide to Using YubiKey for GPG and SSH
  35. …have a Mac with Touch ID, you can also use secretive, which requires fingerprint authentication: https://github.com/maxgoedjen/secretive Extra nice with the new Apple Magic Keyboard with Touch ID.
    comment by danieldk · 2021-09-18 · in The pitfalls of using SSH-agent, or how to use an agent safely
  36. I use this: https://github.com/maxgoedjen/secretive
    comment by pram · 2021-06-23 · in Arm Introduces Its Confidential Compute Architecture
  37. …much guarantee i cannot use my password manager on other platforms. I already use Secretive ( https://github.com/maxgoedjen/secretive ) to store SSH keys in the secure enclave with touch id integration, and it works really well. I also…
    comment by 8fingerlouie · 2021-04-14 · in 1Password Secrets Automation
  38. …this, and works on any Mac with the T2. I use it for all my ssh keys these days. It’s super slick! https://github.com/maxgoedjen/secretive
    comment by pram · 2021-02-26 · in How often should I rotate my SSH keys?