Launched this week
Safe8bit
Keep your API keys away from AI coding agents
2 followers
Keep your API keys away from AI coding agents
2 followers
A secrets vault for developers on the Mac. Keys,env files and logins by project, encrypted and unlocked with Touch ID. Its Shield stops Claude Code and Cursor from reading secrets, and safe8bit run gives them to your app instead. No account, no server.
Free Options
Launch Team
CloudflareYour next app belongs on Cloudflare Workers. Deploy for free
Promoted
Hi Product Hunt! I'm Erik, an iOS developer in Lisbon.
I built Safe8bit because AI coding agents read .env files without a second thought. Ask Claude Code why a Stripe call fails and the live key ends up in the transcript.
What it does:
A vault for API keys, .env files, .p8 keys and logins, by project and environment. Encrypted on your Mac (AES-256-GCM, Argon2id), unlocked with Touch ID. No account, no server.
The Shield hooks into Claude Code and Cursor: it blocks reading .env files, keys and any file that contains a vault value, and asks you before printenv or safe8bit read.
safe8bit run -- npm start puts the variables into your app's process, so the agent can run your app without ever seeing the keys.
Git Guard blocks commits that contain vault values, and there's an SSH agent with Touch ID.
Lite is free forever (the Shield and Guard only log there). Pro is $39/year.
It's a guardrail against accidental leaks, not a sandbox. I'd love to hear which agents I should support next, and what would make you trust a vault like this.