Stop pasting API keys into chats. Stop fiddling with .env files. Noxkey stores credentials in the macOS Keychain, protected by Touch ID.
Developers work with dozens of secrets across projects. The current workflow is broken.
Pasting secrets into AI chats, Slack messages, or terminal prompts. Once it's in the context, you can't take it back.
Scattered .env files across projects. Copy-pasting between them. Accidentally committing one to git. Forgetting which key goes where.
An API key expires. You find out when production breaks. No warnings, no tracking, no organization. Just surprises.
Everything you need to manage credentials without friction, and without exposing them.
Every secret retrieval requires biometric authentication. No master passwords. No unlocked vaults sitting open on your desktop.
The share command encrypts secrets to temporary files that auto-delete after 60 seconds. AI agents get access without ever seeing the raw value.
Press Cmd+Shift+K from any app. A floating panel appears near your cursor. Search, Touch ID, copied. Under 2 seconds.
Name credentials as org/project/KEY and they group automatically. Filter instantly. No more hunting through .env files.
Store API keys, login pairs, recovery codes, and plain secrets. Each with a dedicated form and type badge.
Set expiry dates on credentials. Get automatic warnings before they expire. Never find out from a production outage again.
Unlock a project prefix once with Touch ID. Access all credentials in that group without repeated prompts during your work session.
Copied secrets are automatically cleared from your clipboard after 30 seconds. No stale credentials in your paste buffer.
No proprietary vault. No sync servers. Everything lives in the macOS Keychain, encrypted by Apple's Secure Enclave.
Click to open, search your credentials, edit metadata, add new ones. Everything organized by project.
Press Cmd+Shift+K from any app. Type to filter, click to copy with Touch ID. Done in under 2 seconds.
Use noxkey share to encrypt a secret to a temp file. Pass it to your AI agent. Auto-deletes. Value never enters context.
The CLI installs automatically when you open the app. Manage credentials directly from your terminal.
Browse all credentials or filter by project prefix. See types, expiry, and peek values at a glance.
Share secrets with AI agents via encrypted temp files. Value never appears in stdout or conversation context.
Import from .env files, export when needed. Migrate your existing secrets in one command.
One Touch ID per prefix. All reads, writes, and deletes under that prefix skip auth until session expires.
Noxkey integrates with the tools you already use, without requiring any changes.
Use in shell substitution, build scripts, and CI pipelines. Values flow to commands without appearing in logs.
Encrypted share command designed for AI. Agents get access to secrets without the raw value entering their context window.
Consistent naming conventions across your organization. Everyone uses the same paths, so scripts just work.
Free and open source. One Homebrew command installs everything — app, CLI, and Touch ID integration. Your secrets never leave your Mac.
$ brew install no-box-dev/noxkey/noxkey
Requires macOS 14.0 or later with Touch ID.