awesome-repositories.com
Blog
MCP
awesome-repositories.com

Discover the best open-source repositories with AI-powered search.

ExploreCurated searchesOpen-source alternativesSelf-hosted softwareBlogSitemap
ProjectMCP serverAboutHow we rankPress
LegalPrivacyTerms
© 2026 Bringes Technology SRL·VAT RO45896025·hello@awesome-repositories.com
maxgoedjen avatar

maxgoedjen/secretive

0
View on GitHub↗
8,162 stars·191 forks·Swift·mit·17 viewssecretive.dev↗

Secretive

Secretive is an SSH key manager that utilizes hardware-backed security modules to generate and store non-exportable private keys. It integrates with secure enclaves to ensure that sensitive cryptographic material remains within the hardware and cannot be exported from the device.

The system implements a biometric authentication workflow, requiring fingerprint or wearable verification before a private key is released for signing operations. It also provides the ability to bridge signing requests to external hardware tokens for systems that lack a built-in secure enclave.

The project includes utilities for managing public key metadata, mapping keys to local files, and monitoring key usage through event-based access notifications. It further provides configuration options to integrate these hardware-backed authentication capabilities with external applications.

Features

  • Hardware Security Module Integrations - Integrates with secure enclaves to store private keys in hardware-backed security modules.
  • Secure Enclaves - Implements non-exportable SSH key storage using hardware-backed secure enclaves to prevent private key extraction.
  • Biometric Authentication - Requires biometric verification before allowing a private key to be used for signing operations.
  • Biometric Unlocking - Implements hardware-backed biometric verification to grant access to private signing keys.
  • Cryptographic Key Generation - Generates cryptographic keys directly inside a secure enclave so private material never leaves the hardware.
  • Hardware-Internal Key Generation - Enables the creation of private keys within a hardware security module to prevent sensitive material from being exported.
  • Identity & Key Management - Generates and stores private keys within a hardware-backed secure enclave to prevent unauthorized export.
  • Hardware-Backed Key Storage - Stores and manages private keys within a hardware security module to prevent unauthorized export.
  • SSH Key Management - Provides hardware-backed storage and access monitoring for SSH private keys.
  • Security Access Alerts - Triggers real-time alerts whenever the secure enclave is accessed to monitor key usage.
  • Hardware Security Module Integrations - Integrates with external hardware tokens for performing cryptographic signing operations.
  • Hardware Token Bridging - Routes signing requests to external security tokens for systems without a built-in secure enclave.
  • Credential Access Monitoring - Tracks and logs interactions with private keys to notify users of all authentication attempts.
  • Search Utilities - Store SSH keys in the Secure Enclave.

Star history

Star history chart for maxgoedjen/secretiveStar history chart for maxgoedjen/secretive

How this analysis was created: This summary and feature list were written by an AI model that read the project's README and public documentation pages. Each feature links to the documentation it came from; stars, license and language come straight from the GitHub API. The model does not read the source code, and the analysis is refreshed when the project is re-analysed. Learn more on our About page.

AI search

Explore more awesome repositories

Describe what you need in plain English — the AI ranks thousands of curated open-source projects by relevance.

Start searching with AI

Open-source alternatives to Secretive

Similar open-source projects, ranked by how many features they share with Secretive.
  • sekey/sekeysekey avatar

    sekey/sekey

    2,514View on GitHub↗

    Sekey is a hardware-backed SSH key manager and authentication agent designed to isolate private keys from system memory. It utilizes a secure enclave to generate, store, and manage cryptographic key pairs, ensuring that sensitive material remains within a protected hardware environment and cannot be extracted by the host system. The project implements biometric-gated request signing, requiring a biometric authentication event before the hardware security module signs a cryptographic challenge. It functions as a middleware bridge that connects standard SSH protocols to these hardware-based sig

    Rust
    View on GitHub↗2,514
  • eritpchy/fingerprintpayeritpchy avatar

    eritpchy/FingerprintPay

    4,145View on GitHub↗

    FingerprintPay is an Android biometric payment bridge and credential manager that replaces manual password entry with biometric verification for checkout processes in compatible mobile applications. It functions as a tool to authorize payment transactions and automate credential entry through fingerprint verification. The system utilizes hardware-backed security to decrypt stored payment credentials and map biometric identities to encrypted data blobs stored within the device hardware security module. The project covers mobile payment security and automated credential entry by combining hard

    Javaandroidmagisk-moduleriru-module
    View on GitHub↗4,145
  • bitwarden/androidbitwarden avatar

    bitwarden/android

    8,457View on GitHub↗

    This project is an Android password manager application that provides an end-to-end encrypted vault for storing and synchronizing login credentials, secure notes, and identities. It functions as a secure storage system using zero-knowledge encryption to ensure that only the user can decrypt their stored data. The application integrates directly with the Android system to provide an autofill service that populates usernames and passwords into mobile apps and browser login fields. It also serves as a passkey management wallet for FIDO2 cryptographic passkeys and a time-based one-time password a

    Kotlinandroidbitwardencompose
    View on GitHub↗8,457
  • drduh/yubikey-guidedrduh avatar

    drduh/YubiKey-Guide

    12,377View on GitHub↗

    This project is a comprehensive hardware security guide for using YubiKey tokens to manage encryption, digital signatures, and secure authentication. It provides technical instructions for configuring hardware security modules to handle digital identity and cryptographic materials. The documentation focuses on the implementation of OpenPGP and SSH workflows, specifically covering the creation of master key hierarchies, the rotation of subkeys, and the use of hardware-backed keys for secure shell connections. It also details methods for verifying code authorship through signed Git commits and

    HTML
    View on GitHub↗12,377
See all 30 alternatives to Secretive→

Frequently asked questions

What does maxgoedjen/secretive do?

Secretive is an SSH key manager that utilizes hardware-backed security modules to generate and store non-exportable private keys. It integrates with secure enclaves to ensure that sensitive cryptographic material remains within the hardware and cannot be exported from the device.

What are the main features of maxgoedjen/secretive?

The main features of maxgoedjen/secretive are: Hardware Security Module Integrations, Secure Enclaves, Biometric Authentication, Biometric Unlocking, Cryptographic Key Generation, Hardware-Internal Key Generation, Identity & Key Management, Hardware-Backed Key Storage.

What are some open-source alternatives to maxgoedjen/secretive?

Open-source alternatives to maxgoedjen/secretive include: sekey/sekey — Sekey is a hardware-backed SSH key manager and authentication agent designed to isolate private keys from system… eritpchy/fingerprintpay — FingerprintPay is an Android biometric payment bridge and credential manager that replaces manual password entry with… bitwarden/android — This project is an Android password manager application that provides an end-to-end encrypted vault for storing and… drduh/yubikey-guide — This project is a comprehensive hardware security guide for using YubiKey tokens to manage encryption, digital… achep/keyguard-app — Keyguard is a password manager application and secure vault designed for storing and organizing logins, passkeys, and… guanzhi/gmssl — GmSSL is an open-source cryptographic library that implements the Chinese national cryptographic standards SM2, SM3,…