SSH Keys Manager
Browse, generate and organise SSH keys and edit SSH config entries in a native window instead of the terminal.GetMIT
Secretive
Keeps SSH keys in the Mac's Secure Enclave or on a smart card, with Touch ID approval and a notice each time a key is used.
MIT · Free download · Downloads from github.com
- License
- MIT
- Open source
- Source
- GitHub
- maxgoedjen
- Verified
- 2026
About Secretive
Secretive creates SSH keys inside the Secure Enclave and serves them to ssh, Git and other tools through an SSH agent. Because the private key is generated in the enclave, it cannot be copied off the Mac by malware or by you. Each key can be set to require Touch ID or Apple Watch approval, and the app shows a notification whenever a key is used.
Macs without a Secure Enclave can use a smart card such as a YubiKey instead. Recent versions also handle SSH certificates and show pending signing requests.
The flip side of non-exportable keys is that they cannot be backed up or moved to another Mac, so each new machine needs its own keys. Version 4 needs macOS 15 or later. Release builds are produced by GitHub Actions and carry GitHub artifact attestations.
Information
- Source code
- maxgoedjen/secretive
- License
- MIT
- Website
- secretive.dev
- Download
- github.com
- Homebrew
- secretive
- Category
- Privacy & security
- Evidence checked
- Tags
OpenMacApps links to each project’s official download. Check its release notes for macOS version and Apple silicon support. The verification date records our license and source review, not a security audit.
Sources and image credits
- github.com/maxgoedjen/secretive
- github.com/maxgoedjen/secretive/blob/main/LICENSE
- github.com/maxgoedjen/secretive/releases
- icon.png: Max Goedjen. MIT; app icon from the official release bundle, trademarks retained.
License and artwork notices
For the Developer
Link to this page from your README with a badge.
[](https://openmacapps.com/apps/secretive/)You Might Also Like
fob
Keeps SSH and Git signing keys in the Secure Enclave and asks for Touch ID, naming the destination, before each use.GetAGPL-3.0
Gantry
A Mac app for managing Docker containers, images and Compose stacks locally and on remote hosts over SSH.GetMIT
BlockBlock
Receive alerts when software attempts to establish persistence.GetGPL-3.0
ClearanceKit
Block processes from protected files unless a rule tied to their code-signing identity allows it.GetMIT
Cloaker
Password-based file encryption: drop a file on the window, choose a password and save the encrypted copy.GetGPL-3.0
Cryptomator
Create encrypted file vaults that can live in local folders or cloud-synced storage.GetGPL-3.0
Deadbolt
Encrypt and decrypt files or folders with a password through a minimal drag-and-drop window.GetMIT
Dylib Hijack Scanner
Scan for applications susceptible to dynamic-library hijacking.GetGPL-3.0
Ente Auth
A two-factor authenticator for TOTP codes with optional end-to-end encrypted backup and sync across devices.GetAGPL-3.0
KnockKnock
Inspect software configured to persist on your Mac.GetGPL-3.0
LuLu
See and control which apps make outgoing network connections.GetGPL-3.0