Keeper
embedded secret store for Go (help me break it)
Get picks like this daily. Today's launch numbers, the top launches, AI and tech news, and a daily opportunity pick, straight to your inbox.
Want to reach these readers? Sponsor an issue.
Keeper is an embeddable secret store (Argon2id, XChaCha20-Poly1305 by default). Four security levels, audit chains, crash-safe rotation. Vault is overkill for most use cases. This is for when you ge paranoid about env and need encrypted local storage that doesn't suck. No security through obscurity, hence, It's still early, so now's the best time to find weird edge cases, race conditions, memory leaks, crypto misuse, anything that breaks. The README has a full security model breakdown if you want to get adversarial.
HN · launched Apr 10, 2026 · 64 upvotes (top 14%) · 0 views
Niche: encryption and cryptography tools · 147 launches, 24 in the last 7 days ▲ +100% · Explore this niche →
Category and tags
- Horizontal
- Dev tools
- Developer
- Not AI
- Hobby / open-source project
Visit website ↗ Source listing ↗
More like this: all 147 launches in encryption and cryptography tools →
Could you build this?
No Implementing cryptographic primitives, secure memory management, and crash-safe audit chains requires rigorous cryptographic domain expertise where AI hallucinations can cause catastrophic vulnerabilities.
What it would actually take: Building this requires cryptographic systems engineering in Go using libraries like golang.org/x/crypto. The architecture involves custom crash-safe WAL/journaling, strict memory zeroing to avoid secrets leaking into swap/dumps, and tamper-evident cryptographic hash chains. It requires deep expertise in applied cryptography, security auditing, and low-level Go runtime internals.
Discussion
20 comments analyzed.
Competitors mentioned: OIDC in CI/CD for eliminating stored secrets, fnox for unified secrets access across dev/CI/prod, Keeper Security for credential management, age + filesystem secrets manager, secret (Go CLI-focused secrets manager)
Concerns raised: WAL approach not atomic, can corrupt on crash, Key management at scale complexity, Single bbolt database limitation, Audit system ineffective if on compromised machine, Product name confusion with Keeper Security
Feature requests: Append-only log instead of WAL for crash safety, Post-quantum KEMs like ML-KEM support, External WAL for true crash-safe rotation, Multiple database backend options beyond bbolt
Competitors
Other products that read as similar to this one : 259 launches clear the similarity bar, closest 8 shown.
Attention rank: #38 of 260 (itself plus its competitors, highest first, normalized so YC and Product Hunt are compared fairly).
Launched 162 days after the earliest competitor.
- KeeperPass · ph · 2026-09-23 · 8 upvotes · similarity 0.66
- Keepr · hn · 2025-11-14 · 17 upvotes · similarity 0.52
- Vaultly Simple, secure password manager · ph · 2026-09-30 · 1 upvotes · similarity 0.51
- Security Vault · ph · 2026-10-26 · 1 upvotes · similarity 0.50
- Self Vault · ph · 2026-11-11 · 1 upvotes · similarity 0.50
- Sealby · ph · 2026-09-22 · 2 upvotes · similarity 0.49
- Securelytix Data VaultKey · ph · 2026-09-10 · 1 upvotes · similarity 0.49
- Lockenv · hn · 2025-12-08 · 105 upvotes · similarity 0.48
The niche, labels, vibe code rating and competitor comparison on this page are analysis by Nicheloom. If you use them, please credit nicheloom.com. How you may use our data.