Lockenv
Simple encrypted secrets storage for Git
Details
- External ID
- 46189480
- Source
- HN
- Company
- —
- Product
- Lockenv
- Website domain
- github.com
- Launched
- Dec. 8, 2025
- Cohort
- —
- Upvotes
- 105
- Upvotes percentile
- 0.9083969465648855
- Tags
- —
- Fetched at
- Sept. 7, 2026, 9:25 p.m.
- Updated at
- Sept. 7, 2026, 9:25 p.m.
Description
Hi!I got tired of setting up tools I can't explain to a team in a few words like sops or git-crypt, just to store few files with environment variables or secrets, so I built lockenv as a simple alternative.It's basically a password-protected vault file you commit to git. No gpg keys, no cloud, just lockenv init, set a password, and lock/unlock the secrets.This tool integrates with OS keyring, so you're not typing passwords constantly. Should work on Mac/Linux/Windows, but I tested it only on linux so far.I am not trying to replace any mature / robust solution, just making small tool for simple cases, where I want to stop sharing secrets via slack.Feel free to try, thank you!
Enrichment
- Theme
- self-hosted infrastructure and security tools
- Vertical
- Horizontal
- Function
- Dev tools
- Audience
- Developer
- AI stance
- Not AI
- Project type
- Commercial product
- Normalized one-liner
- encrypted secrets storage for git
- Manually corrected
- False
Could you build this?
Yes A CLI tool that encrypts local environment variable files using standard AES/cryptographic libraries and a password before committing to Git can be easily built via vibe coding.
Discussion
20 comments analyzed.
Competitors mentioned: git-crypt, 1Password vaults, Rails encrypted credentials, sops, age
Concerns raised: Third-party credential storage is itself an attack vector, Encryption key management and rotation when team membership changes, Single forgotten unencrypted commit requires rotating all secrets, Version control doesn't show what changed inside encrypted vault, Private key for decryption must be secured like original secrets
Feature requests: Proxy encryption with per-member key rotation on team changes, Custom Git diff tool to view encrypted changes without decryption key, Semantic diff for JSON/YAML showing which keys changed, Support for external secret storage beyond in-repo encryption
Competitors
Other products that read as similar to this one — 211 launches clear the similarity bar, closest 8 shown.
Attention rank: #21 of 212 (itself plus its competitors, highest first — normalized so YC and Product Hunt are compared fairly).
Launched 39 days after the earliest competitor.
- better-env · hn · 2025-11-23 · 6 upvotes · similarity 0.68
- KeyEnv · hn · 2026-01-18 · 5 upvotes · similarity 0.60
- Liberty · hn · 2026-01-14 · 7 upvotes · similarity 0.60
- Git-agecrypt · hn · 2026-04-27 · 7 upvotes · similarity 0.56
- I just fixed .env once and for all · hn · 2025-11-23 · 8 upvotes · similarity 0.56
- A password system with no database, no sync, and nothing to breach · hn · 2026-02-06 · 14 upvotes · similarity 0.53
- Bucket · hn · 2026-01-25 · 9 upvotes · similarity 0.52
- SecretEnv · hn · 2026-05-05 · 5 upvotes · similarity 0.51
Other launches for this product
- No other launches for this product.
Same idea, different domain
Nobody's really built a dev tools tool for Sales yet.