Dev tools · alternatives · 2026
24 alternatives to Partially encrypt a file based on its HEREDOCs
Hi HN! I wrote a tool that partially encrypts files based on the presence of a HEREDOC. Check it out: https://github.com/higgins/privatize When added to a git repo, it will automatically transparently encrypt/decrypt files you want privatized. For example if you configured your repo to privatize the file `example.txt`, you could write: ``` Today I a burrito. <<PRIVATE I was on the toilet for hours. PRIVATE I got a lot of reading done. ``` but when git-commit'ed would become: ``` Today I a burrito. <<PRIVATE xuJ0fld2vmNWaVLogTIufmWsiFso PRIVATE I got a lot of reading…
This tool selectively encrypts portions of files within Git repositories by marking sensitive sections with HEREDOC syntax. When files are committed, only the marked private sections are encrypted while the rest… Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes. Partially encrypt a file based on its HEREDOCs launched in 2022; newer entries below may have overtaken it.
- 1

transparently encrypt files within a git repository - elasticdog/transcrypt
2014 · github.com · its alternatives →
- 2RW
Hi, creator here. This is a demo of our recent work presented at Oakland (IEEE S&P): https://eprint.iacr.org/2022/368. The server and client code are written in Rust and available here: https://github.com/menonsamir/spiral-rs. The general aim of our work is to show that homomorphic encryption is practical today for real-world applications. The server we use to serve this costs $35/month! A quick overview: the client uses homomorphic encryption to encrypt the article number that they would like to retrieve. The server processes the query and…
2022 · spiralwiki.com · its alternatives →
- 3
layer▲88I built a small CLI called layer. It manages .git/info/exclude so you can keep local-only files in a repo without adding them to the shared .gitignore. This came from a normal team repo problem. People keep their own local files in a repo: API_SPEC.md, BACKEND_GUIDE.md, ARCHITECTURE_NOTES.md, CLAUDE.md, prompt files, scratch notes, temporary investigation docs, and other markdown files with custom names that are useful for one developer but should not be committed. The usual answer is “just put it in .gitignore”, but that gets messy fast because these files are different for each…
Mar 2026 · crates.io · its alternatives →
- 4

Simple C++ Image Steganography tool to encrypt and hide files inside images using Least-Significant-Bit encoding. - 7thSamurai/steganography
2022 · github.com · its alternatives →
- 5

- 6

gitfs went on a trip around the world, and we were there to document it: fro Italy to Sweden, from the UK to Spain, gitfs has been center stage.
2014 · presslabs.com · its alternatives →
- 7AG
29d ago · cms-sfx-demo.apeleg.com · its alternatives →
- 8GM
2017 · gitmonkey.io · its alternatives →
- 9

Hi! I got tired of setting up tools I can't explain to a team in a few words like sops or git-crypt, just to store few files with environment variables or secrets, so I built lockenv as a simple alternative. It's basically a password-protected vault file you commit to git. No gpg keys, no cloud, just lockenv init, set a password, and lock/unlock the secrets. This tool integrates with OS keyring, so you're not typing passwords constantly. Should work on Mac/Linux/Windows, but I tested it only on linux so far. I am not trying to replace any mature / robust solution, just…
Dec 2025 · github.com · its alternatives →
- 10

Greetings HN! I've forked the excellent work done by [vlaci/git-agecrypt](https://github.com/vlaci/git-agecrypt), looks like the original project has not been maintained for a while, so I decided to pick it up, update all the dependencies and add some thorough testing. I like the ability to store sensitive data in public repositories, it's especially useful when bootstrapping new IaC repositories, you don't have anything at the beginning of a new project so there is no place yet to store secrets, this is "a way" of doing it. I know you can use tools like SOPS but I…
Apr 2026 · github.com · its alternatives →
- 11

Finally open sourced an internal tool we've been using for managing secrets. It's similar to SOPS, but more opinionated, easier to configure/use correctly, and produces nicer git diffs. It also supports one-way encryption, so you don't have to know the private key to add secrets.
2023 · github.com · its alternatives →
- 12
AxKeyStore▲31Hi HN, I built AxKeyStore, an open-source CLI tool for managing secrets that uses your own private GitHub repository as encrypted storage. The idea is simple: → All encryption happens locally. → Secrets are stored as encrypted blobs in your private repo. → GitHub is treated as untrusted storage. → No plaintext secrets ever leave your machine. → No plaintext secrets are stored on disk. Most secret managers either require a hosted backend, a self-hosted server, or trusting a SaaS provider. I wanted something that: → Requires zero infrastructure → Uses tooling developers already have → Keeps…
Feb 2026 · github.com · its alternatives →
- 13

Client-side encrypted text editor to sync with Gists - srpeck/encryptedgist
2016 · github.com · its alternatives →
- 14

Encrypted filesharing through the IPFS network
2021 · sedo.com · its alternatives →
- 15

encrypted git on s3. Contribute to nathants/git-remote-aws development by creating an account on GitHub.
2022 · github.com · its alternatives →
- 16

Securely share sensitive files
2022 · comply.strac.io · its alternatives →
- 17

We needed something like --dangerously-skip-permissions that doesn’t nuke your untracked files, exfiltrate your keys, or install malware. Claude Code's permission system is allow-or-deny per tool, but that doesn’t really scale. Deleting some files is fine sometimes. And git checkout is sometimes not fine. Even when you curate permissions, 200 IQ Opus can find a way around it. Maintaining a deny list is a fool's errand. nah is a PreToolUse hook that classifies every tool call by what it actually does, using a deterministic classifier that runs in milliseconds. It maps commands to action types…
Mar 2026 · github.com · its alternatives →
- 18

- 19EA
Hi HN, I'm building ThirdCloud with the goal to replace Google Drive for everyone: more private, cheaper & maybe better UI/UX. So far, I've successfully implemented the main feature, which involves uploading and downloading files. Files are encrypted before being sent to IPFS network. Would like to hear your thoughts on this proof of concept.
2023 · thirdcloud.org · its alternatives →
- 20

I tend to create a private certificate authority for every side project, in order to create TLS certs for local development. I find it useful to have local development closely resemble production when at all possible, and "real" certificates are an important element. Anyway I got tired of having these CA private keys on my local machine, especially as I started thinking about setting up a private CA for my company (https://riza.io). So I started thinking about what the simplest way to host a private CA might be. You really only need two things: 1) secret storage, to hold the CA's…
2024 · github.com · its alternatives →
- 21

Stasher is a tiny CLI tool that lets you share encrypted secrets that burn after reading — no accounts, no logins, no servers to trust. I built it because I just wanted to share a password. Not spin up infra. Not register for some "secure" web app. Not trust Slack threads. Just send a secret. Secrets are encrypted client-side with AES-256-GCM. You get a `uuid:key` token to share. Once someone reads it, it's gone. If they don't read it in 10 minutes, it expires and deleted. Everything is verifiable. Every release is signed, SLSA-attested, SBOM-included, and logged in the Rekor transparency…
2025 · github.com · its alternatives →
- 22

2016 · github.com · its alternatives →
- 23CS
Crypt : Store and retrieve encrypted configuration parameters from etcd or consul
2014 · xordataexchange.github.io · its alternatives →
- 24

Also compare
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →