Hi everyone The problem: When you use Git or AWS, your passwords and keys usually sit in plain files on your computer. Any program running on your PC can read them, and you’d never know. What I built: Wardkey keeps those keys in an encrypted vault. When Git or AWS asks for one, Wardkey checks which app is asking. It hands over the key only if your rules allow it, and it can ask for a Windows Hello check (face, fingerprint or PIN) each time. It also plants fake “decoy” keys. If anything asks for one, it is blocked and recorded. Every decision goes into a log that shows if someone edits it. Honest limits: It’s an early prototype for Windows only. It can’t stop malware that already runs as you, and no one has independently audited it yet. Please test with dummy credentials only. I’d love your feedback. Is this useful to you? What all edge cases am I missing?

Wardkey

App-aware credential vault for Git and AWS CLI-Windows Hello

App-aware credential vault for Git and AWS CLI-Windows Hello