Envkeep for Mac
Provide ENV environment variable management and on-demand reading for AI coding assistants.
By jackofshadowz. Free and open source, MIT licence.
Envkeep at a glance
- Version
- 1.0.0
- Released
- 15 June 2026
- Download size
- 773 KB
- Works on
- Apple silicon and Intel
- Licence
- MIT
- Category
- Security and Privacy
- Developer
- jackofshadowz
- GitHub stars
- 9
About Envkeep
Secure, age-encrypted ENV-secret manager with a native macOS GUI and a CLI built for AI coding agents.
Screenshots


How to install Envkeep on a Mac
- Get OpenDMG. It is a free app store for open source Mac apps. Download OpenDMG.
- Search for Envkeep and press Get. OpenDMG downloads version 1.0.0 from jackofshadowz's own GitHub release.
- Open it. The download is checked against its SHA-256 fingerprint and its signature is checked on your Mac before it lands in Applications.
Updates to Envkeep show up in OpenDMG and install with one button. No account is needed.
Prefer to do it by hand? The developer's file is on GitHub: Envkeep-1.0.0-macos.zip (773 KB).
What is new in Envkeep 1.0.0
First public release of **Envkeep** — a secure, age-encrypted ENV-secret manager with a native macOS app and a CLI built for AI coding agents. ## Highlights - 🔐 age-encrypted vault; decrypt-on-demand (no plaintext at rest) - 🖥️ native macOS app (Swift/WKWebView) + zero-dependency CLI - 🗂️ projects/folders, ⌘K command palette, import from `.env` - 🔒 clipboard auto-clear, optional Keychain cache with auto-lock, audit log ## Install **CLI:** ```bash git clone https://github.com/jackofshadowz/envkeep.git && cd envkeep ./install.sh && envkeep init ``` **App:** download `Envkeep-1.0.0-macos.zip` below, unzip, and move `Envkeep.app` to /Applications. > The app is ad-hoc signed (not notarized). On first launch macOS may warn it's > from an unidentified developer — **right-click → Open**, or run: > `xattr -dr com.apple.quarantine Envkeep.app`
More Security and Privacy apps
-
GlanceUnlock your Mac at a glance through on-device face recognition in a dynamic island-style…
-
FaceGateLock sensitive apps behind Face ID, Touch ID, or a password — all processed on-device
-
SentrySecurity monitor that alerts on activity while you're away
-
TouchBridgeBiometric authentication tool using phone, watch, or browser for sudo and unlock
-
MergenCIS benchmark security audit tool that checks 85 controls and auto-fixes most failures
-
TracexySession-based network intelligence — capture live traffic or open saved captures, then…