Apple’s keychain. Apple’s encryption. Your secrets.
The same iCloud Keychain behind Apple’s Passwords app — now for everything that isn’t a login.
API keys, recovery codes, private notes, SSH keys, GPG keys, and more.
API keys, access keys, database tokens, backup codes — the credentials that don't belong in a password manager's login form. Each one named and alphabetized in the sidebar, a search field away when the list grows. Select one to see its details; the value stays masked until you ask.
Secret Store doesn't roll its own vault — your secrets live in Apple's iCloud Keychain, the same end-to-end encrypted store as your Safari passwords. Built-in diagnostics show when the keychain last loaded and confirm nothing's been left orphaned, so you can see for yourself that the store is healthy. No account, no server, nothing to configure.
Leave Secret Store idle for five minutes and it locks itself — the same inactivity timeout Apple's Passwords app uses — plus the moment your screen sleeps or locks. Switch to another app mid-reveal and any visible value re-masks right away, so a Mission Control thumbnail never catches plaintext. Or lock it yourself the instant you want to.
Unlocking runs through macOS itself — Touch ID, or your Mac's login password. The same gate that guards your Mac guards your secrets, and there's no separate Secret Store password to forget or for anyone to phish.
What goes in
Secret Store holds the sensitive strings a password manager’s login form can’t — and leaves the rest to the apps that already do them well.
Security & privacy
Secret Store doesn’t store, sync, or encrypt anything itself — your secrets live entirely in Apple’s iCloud Keychain, the same end-to-end encrypted store that holds your passwords. No Secret Store server to breach, no homegrown crypto to trust. We never see your secrets, and neither does anyone else.
Your secrets live in iCloud Keychain, encrypted on-device and synced through the same end-to-end channel as your Safari passwords. The data is sealed before it ever leaves your Mac.
You don't create a Secret Store account, and there's no Secret Store server holding your data. Sync rides your existing iCloud Keychain — nothing routes through us.
We never roll our own crypto, wrap your data, or derive our own keys. The encryption guarantee belongs entirely to Apple's keychain — there's no homegrown scheme to trust.
Unlocking checks your Mac's Touch ID or login password. The vault auto-locks after five idle minutes — the same timeout as Apple's Passwords app — and whenever your screen sleeps or locks; any revealed value re-masks the moment you switch away.
Copy a secret and the clipboard wipes itself 90 seconds later, unless you've copied something else since. The copy is also flagged so clipboard managers and Universal Clipboard skip it — a value you paste once doesn't linger for the next thing that reads your clipboard.
No analytics, no tracking pixels, no third-party SDKs. The app has no general network entitlement at all — there's no channel for your secrets to leak out of.
Remove a secret and it's gone from your keychain, and the deletion syncs through iCloud Keychain like any other change. There's no Secret Store server keeping a copy, so nothing lingers after you delete it.
App Sandbox and Hardened Runtime are on. Secret Store can only read files you explicitly pick, and nothing more — no ambient filesystem access, no surprises.
Built by Corey Daley
I’m not an app farm. I’m not a marketing team. Email goes directly to me. If something’s broken, I’m the one who fixes it. If you have a feature request, I’m the one who reads it.
Free to start. Unlock once.
Free to download, and free to use for up to 10 secrets. Forever.
$4.99
One-time In-App Purchase — unlimited secrets.
