Keepd: Secrets That Never Rest on Your Servers

Why it surfaced

Keepd is built around an unusually strict failure scenario: the server is already compromised. Its one-command agent combines biometric approval, ephemeral key exchange, locked memory, disabled core dumps, and a hash-chained audit log into a memorable alternative to ordinary secret managers.

Keepd delivers production secrets directly into a process's protected memory, using human approval and Face ID instead of writing them to disk.