Commerce · alternatives · 2026
24 alternatives to Ward – a file vault written in bash
just wanted to share ward, a tool i hacked together to encrypt and manage sensitive files in a vault folder. it's written in bash and meant to be cloned and then stored using git or version control. you don't have to store it that way, it's just why i created it. what ward does: encrypts the files in ./vault/ into a single .gpg file, checks to see if your files have been tampered with, generates totp codes if you need them to recover critical accounts. how to use it: clone the repo, toss your files into the vault directory, and run yarn encrypt. now commit your new [private]…
Ward is a bash-based file vault tool that encrypts sensitive files stored in a vault folder into a single GPG file. It detects tampering, generates time-based one-time passwords for account recovery, and is designed to… Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes. Ward – a file vault written in bash launched in 2024; newer entries below may have overtaken it.
- 1
Hi! I got tired of setting up tools I can't explain to a team in a few words like sops or git-crypt, just to store few files with environment variables or secrets, so I built lockenv as a simple alternative. It's basically a password-protected vault file you commit to git. No gpg keys, no cloud, just lockenv init, set a password, and lock/unlock the secrets. This tool integrates with OS keyring, so you're not typing passwords constantly. Should work on Mac/Linux/Windows, but I tested it only on linux so far. I am not trying to replace any mature / robust solution, just…
Dec 2025 · github.com · its alternatives →
- 2
Contribute to fmeringdal/covert development by creating an account on GitHub.
2023 · github.com · its alternatives →
- 3
- 4
Keeper is an embeddable secret store (Argon2id, XChaCha20-Poly1305 by default). Four security levels, audit chains, crash-safe rotation. Vault is overkill for most use cases. This is for when you ge paranoid about env and need encrypted local storage that doesn't suck. No security through obscurity, hence, It's still early, so now's the best time to find weird edge cases, race conditions, memory leaks, crypto misuse, anything that breaks. The README has a full security model breakdown if you want to get adversarial.
Apr 2026 · github.com · its alternatives →
- 5
Lightweight solution for using encrypted passwords in shell scripts - plyint/encpass.sh
2018 · github.com · its alternatives →
- 6
Space-Bin▲80Secure temporary workspaces. No sign-up required.
Jul 2026 · space-bin.onrender.com · its alternatives →
- 7
layer▲88I built a small CLI called layer. It manages .git/info/exclude so you can keep local-only files in a repo without adding them to the shared .gitignore. This came from a normal team repo problem. People keep their own local files in a repo: API_SPEC.md, BACKEND_GUIDE.md, ARCHITECTURE_NOTES.md, CLAUDE.md, prompt files, scratch notes, temporary investigation docs, and other markdown files with custom names that are useful for one developer but should not be committed. The usual answer is “just put it in .gitignore”, but that gets messy fast because these files are different for each…
Mar 2026 · crates.io · its alternatives →
- 8SE
2019 · fluidkeys.com · its alternatives →
- 9
I have been working on Sesame, an open-source password manager that keeps your vault local by default. You don't need an account to create or use a vault, and the hosted service never receives the vault itself. It's still early software and the independent security review isn't finished yet, so I am mainly interested in feedback, testing, and people looking through the code. (Linux support is yet to be released on v0.1.2, but currently is in the works.)
Aug 2026 · usesesame.app · its alternatives →
- 10
Spawning and storage of secure environments. Contribute to miquella/vaulted development by creating an account on GitHub.
2016 · github.com · its alternatives →
- 11vault▲25
save links, notes, and images. private & open source.
2025 · getvault.pages.dev · its alternatives →
- 12
VaultNote▲10Your secrets, locked until you open them.
Nov 2025 · vaultnote.rishishah.in · its alternatives →
- 13
Stasher is a tiny CLI tool that lets you share encrypted secrets that burn after reading — no accounts, no logins, no servers to trust. I built it because I just wanted to share a password. Not spin up infra. Not register for some "secure" web app. Not trust Slack threads. Just send a secret. Secrets are encrypted client-side with AES-256-GCM. You get a `uuid:key` token to share. Once someone reads it, it's gone. If they don't read it in 10 minutes, it expires and deleted. Everything is verifiable. Every release is signed, SLSA-attested, SBOM-included, and logged in the Rekor transparency…
2025 · github.com · its alternatives →
- 14
Your private vault for passwords and sensitive data.
2025 · apps.apple.com · its alternatives →
- 15
Generates self-contained HTML files protecting secret text content. - dividuum/html-vault
2020 · github.com · its alternatives →
- 16
File encryption secured by a USB key, not a password
Aug 2026 · github.com · its alternatives →
- 17
Simple command line password manager using a flat file as a database and GPG encryption - mrbalihai/passbox
2015 · github.com · its alternatives →
- 18
2016 · github.com · its alternatives →
- 19
GTK+ 1Password reader. Contribute to jbreams/gonepass development by creating an account on GitHub.
2015 · github.com · its alternatives →
- 20LH
I got tired of: - .env files committed to Git (seen it happen 100+ times) - API keys shared in Slack - Wondering who has access to what secrets So I built Liberty - a CLI tool that replaces .env files with hardware-bound encryption. How it works: $ pip install liberty-secrets $ liberty add DATABASE_URL postgresql://... $ liberty add STRIPE_KEY sk-... $ liberty exec npm start Secrets are encrypted with a key derived from your machine's hardware (CPU ID + machine ID + disk serial). If someone steals your .liberty vault file, it's useless on their machine. Features: - Hardware-bound…
Jan 2026 · its alternatives →
- 21
Hi HN, I’m Daniel. I built Trust Vault. It’s a desktop open source app for protecting sensitive files using passwords, 256-bit master tokens, Shamir’s Secret Sharing, and HMAC integrity verification. We also built an Obsidian plugin. I’d appreciate feedback on the security model, UX, and potential use cases.
2025 · tvault.app · its alternatives →
- 22
Upload,Encrypt and Share.
Jan 2026 · only-mine.netlify.app · its alternatives →
- 23
Batch PII anonymization with encrypted local vault
Mar 2026 · anonym.legal · its alternatives →
- 24
AxKeyStore▲31Hi HN, I built AxKeyStore, an open-source CLI tool for managing secrets that uses your own private GitHub repository as encrypted storage. The idea is simple: → All encryption happens locally. → Secrets are stored as encrypted blobs in your private repo. → GitHub is treated as untrusted storage. → No plaintext secrets ever leave your machine. → No plaintext secrets are stored on disk. Most secret managers either require a hosted backend, a self-hosted server, or trusting a SaaS provider. I wanted something that: → Requires zero infrastructure → Uses tooling developers already have → Keeps…
Feb 2026 · github.com · its alternatives →
Also compare
- Lockenv – Simple encrypted secrets storage for Git alternatives
- Covert – Rewrite of HashiCorp Vault Using Rust, SQLite and Litestream alternatives
- Vault3 alternatives
- Keeper – embedded secret store for Go (help me break it) alternatives
- Use encrypted passwords in shell scripts signed with your SSH key alternatives
- Space-Bin alternatives
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →