TiloBox
Back to directory
Secretive project preview
Developer ToolsAlternative to 1Password SSH AgentAlternative to YubiKey PIVAlternative to Krypton

Secretive

Store SSH keys in the macOS Secure Enclave with Touch ID authentication.

View on GitHub
LicenseBSD-3-Clause
GitHub stars6.5k
Last commit1 weeks ago
Tags6 topics
Hardware KeySecure Enclave SshMacos SecuritySecuritySwiftTouch Id Auth
Overview

Why consider Secretive?

Secretive is an open-source macOS native application written in Swift that stores SSH private keys inside the hardware Secure Enclave. Private cryptographic keys can never be exported or stolen by malware, requiring physical biometric Touch ID authorization for SSH handshakes.

Guided learning

Learn Secretive by building

Practical setup notes, real use cases, and copy-ready examples in one focused guide.

1 min read 2 sections
In this guide2 sections

Overview of Secretive

Secretive protects developer Git and SSH credentials with hardware-level Secure Enclave isolation and Touch ID prompts.

Installation

bash
1brew install --cask secretive

Secretive is licensed under the BSD-3-Clause License.

Related tools

More options with a similar category or technology profile.

diskus logo

diskus

Minimal, fast alternative to du -sh written in Rust using multi-threaded directory traversal.

peco logo

peco

Simplistic interactive filtering tool for Unix pipelines, process lists, and file trees.

Dapr CLI logo

Dapr CLI

Command-line tool for managing Dapr distributed application runtime environments and sidecars.

Freeze logo

Freeze

Generate beautiful image screenshots and SVGs of code snippets and terminal outputs.

Secretive FAQs

Secretive is listed as a Developer Tools tool on TiloBox. Review the overview, features, and official documentation on this page to decide whether it solves your specific workflow.

Start with the project's GitHub repository for supported installation and deployment instructions. Test the setup with representative data or a small project before rolling it out more widely.

Secretive is listed under the BSD-3-Clause license. Read the complete license text and the project's notices before using, modifying, or distributing the software.

Production readiness depends on your requirements. Review maintenance activity, security practices, documentation, backup and upgrade procedures, and compatibility with your stack; then validate it in a non-production environment.

Secretive is listed as an alternative to 1Password SSH Agent. Compare the core workflow, deployment model, integrations, and licensing against your must-have requirements before switching.