Nicheloom visits: 58,069 all-time · 7,637 in the last 7 days

The opportunity tracker for new startups.

Today: 1,953 launches · Niche of the day: specialized calculation tools · See what launched today →

Lockenv

Simple encrypted secrets storage for Git

Get picks like this daily. Today's launch numbers, the top launches, AI and tech news, and a daily opportunity pick, straight to your inbox.

Want to reach these readers? Sponsor an issue.

Hi!I got tired of setting up tools I can't explain to a team in a few words like sops or git-crypt, just to store few files with environment variables or secrets, so I built lockenv as a simple alternative.It's basically a password-protected vault file you commit to git. No gpg keys, no cloud, just lockenv init, set a password, and lock/unlock the secrets.This tool integrates with OS keyring, so you're not typing passwords constantly. Should work on Mac/Linux/Windows, but I tested it only on linux so far.I am not trying to replace any mature / robust solution, just making small tool for simple cases, where I want to stop sharing secrets via slack.Feel free to try, thank you!

HN · launched Dec 8, 2025 · 105 upvotes (top 9%) · 0 views

Niche: encryption and cryptography tools · 147 launches, 21 in the last 7 days ▲ +40% · Explore this niche →

Category and tags
  • Horizontal
  • Dev tools
  • Developer
  • Not AI
  • Hobby / open-source project

Visit website ↗ Source listing ↗

More like this: all 147 launches in encryption and cryptography tools →

Could you build this?

Yes A CLI tool that encrypts local environment variable files using standard AES/cryptographic libraries and a password before committing to Git can be easily built via vibe coding.

Discussion

20 comments analyzed.

Competitors mentioned: git-crypt, 1Password vaults, Rails encrypted credentials, sops, age

Concerns raised: Third-party credential storage is itself an attack vector, Encryption key management and rotation when team membership changes, Single forgotten unencrypted commit requires rotating all secrets, Version control doesn't show what changed inside encrypted vault, Private key for decryption must be secured like original secrets

Feature requests: Proxy encryption with per-member key rotation on team changes, Custom Git diff tool to view encrypted changes without decryption key, Semantic diff for JSON/YAML showing which keys changed, Support for external secret storage beyond in-repo encryption

Competitors

Other products that read as similar to this one : 483 launches clear the similarity bar, closest 8 shown.

Attention rank: #48 of 484 (itself plus its competitors, highest first, normalized so YC and Product Hunt are compared fairly).

Launched 39 days after the earliest competitor.

Related data

The niche, labels, vibe code rating and competitor comparison on this page are analysis by Nicheloom. If you use them, please credit nicheloom.com. How you may use our data.