Observed arrival · 2026-11-05
dotsafe: a local-first secret manager
An open-source secret manager for developers that keeps vaults on their devices and syncs encrypted files through storage they choose.
- For
- Developers managing secrets across projects and AI agents
- Worth noticing
- The page says agents can run approved commands while secret values are removed from returned output.
Field notes
The product pairs a desktop vault with a CLI: variables can be linked across environments, rotated once, and imported from Doppler, Infisical, or 1Password. The page says vault files are encrypted locally using XChaCha20-Poly1305 and Argon2id, then synced through user-selected storage such as iCloud Drive, Dropbox, S3/R2, or WebDAV. For AI-agent commands, it describes Touch ID approval and removal of secret values from returned output; these are product claims, not independently verified here.
Observed signals
Read the marks
Editorial observations of this landing page, not a rating.
One card from the complete issue