nowfound

Dev tools · July 17, 2025

kiln – Git-native, decentralized secret management using age

Hi HN, I've been building this tool for the past couple of weeks to solve a problem that seems universal across development teams: sharing environment variables securely. You know the drill - someone needs the staging database URL, so it gets shared over chat. Production API keys end up in plaintext files. Or you set up some complex secret management system that becomes a single point of failure during critical deployments. At Zerodha, we're a stock broker with strict regulatory requirements. Our infrastructure needs to be auditable, and our data must stay with us for instant recovery. But…

kiln – Git-native, decentralized secret management using age launched on July 17, 2025 with 12 votes, #1,378 of 9,223 launches that month and more than 75% of that year's launches. The site was still online in September 2026, 1 year on.

Visit kiln.sh ↗Alternativestop 15% of July 2025

In plain words

Kiln is a Git-native secret management tool that encrypts environment variables and credentials using age encryption, allowing development teams to store secrets directly in version control with auditable access. Designed for regulated industries and teams wanting to avoid external dependencies, it eliminates the need for complex systems like Vault while preventing secrets from being exposed in chat or plaintext files. The tool integrates with Git workflows to keep sensitive data self-hosted and instantly recoverable.

written from the facts on this page · September 2026

From the sources

Encrypt your secrets with ease, share safely with your team, deploy with confidence—all from a command line that you control.

Seamlessly decrypt and expose secrets as environment variables to your apps with a single command, or export to a file. No servers, databases, or external dependencies. Your secrets stay with your code. Works completely offline with local files. Deploy anywhere, anytime. Encrypted files commit safely alongside your code. No separate infrastructure. Built-in access control and recipient management. Add team members, create groups, and manage permissions effortlessly. Separate encrypted files for dev, staging, and production with independent accessfrom kiln.sh

In the maker’s words, at launch

Hi HN, I've been building this tool for the past couple of weeks to solve a problem that seems universal across development teams: sharing environment variables securely. You know the drill - someone needs the staging database URL, so it gets shared over chat. Production API keys end up in plaintext files. Or you set…

Does a similar job

all alternatives →
  • Rot - Offline secrets management2023 · github.com · ▲116

    Finally open sourced an internal tool we've been using for managing secrets. It's similar to SOPS, but more opinionated, easier to configure/use correctly, and produces nicer git diffs. It also supports one-way encryption, so you don't have to know the private key to add secrets.

  • Lockenv – Simple encrypted secrets storage for GitDec 2025 · github.com · ▲105

    Hi! I got tired of setting up tools I can't explain to a team in a few words like sops or git-crypt, just to store few files with environment variables or secrets, so I built lockenv as a simple alternative. It's basically a password-protected vault file you commit to git. No gpg keys, no cloud, just lockenv init, set a password, and lock/unlock the secrets. This tool integrates with OS keyring, so you're not typing passwords constantly. Should work on Mac/Linux/Windows, but I tested it only on linux so far. I am not trying to replace any mature / robust solution, just…

  • 1Password Developer Tools2022 · 1password.com · ▲105

    Develop faster, eliminate complexity, protect your secrets

  • A password manager using Keybase for encryption and storage2017 · github.com · ▲172

    A secret manager backed by Keybase and KBFS. Contribute to kbsecret/kbsecret development by creating an account on GitHub.

  • Losant Kiln2017 · losant.com · ▲103

    The fastest way to build APIs for IoT applications

  • RedentialJul 2026 · redential.com · ▲116

    A developer credential that proves what you built, NDA safe.

More dev tools this month

the category →
  • /dev/null▲484

    a social network for devs

    Dev tools · 3d ago · dev-null.sh

  • open-source IDE for thoughtful software design. Contribute to devdotfast/whiteboard development by creating an account on GitHub.

    Dev tools · 28d ago · github.com

  • Contribute to reladraw/reladraw development by creating an account on GitHub.

    Dev tools · 26d ago · github.com

  • OpenBot▲362

    Grok Bot alternative: free, local, open-source, multiplayer

    Dev tools · 23d ago · openbot.run

  • Talanoa▲346

    Hi HN, I’m a fullstack developer, and honestly, I’ve lost count of how many side projects I’ve worked on over the years. But one idea kept coming back to me: a different kind of email client. It first came to me in 2014: “What if we could handle emails more like conversations?” Every year, I’d revisit this concept in my “Build Notes.” Ten years later, no one had built exactly what I had in mind — so I finally decided to do it myself. That’s how Talanoa was born. I wanted something focused on people, not timelines. I was tired of marking messages as unread just to remember to reply later, or…

    Dev tools · 21d ago · talanoa.email

  • CoreSpeed▲332

    One MCP for everything your agents need: apps, memory, tools

    Dev tools · 28d ago · corespeed.io

Source: Show HN post ↗ · launch text quoted in part

Launched alongside, July 2025

the whole month →
  • Clueso▲1,300

    Create stunning product videos in minutes with AI

    AI · 2025 · clueso.io

  • Hey HN! Introducing Trickle Magic Canvas: the world’s first Agentic Canvas, where you can visually co-create apps and websites with AI, from idea to production. Why is a canvas better? Most AI tools today rely on linear chats or text prompts. We believe that limits creativity and clarity. Canvas changes the game. 1. Every version & page at a glance. Each page and sub-page lives on a timeline. You can quickly browse, edit, and preview progress like a living, visual document — no more digging through chat logs or scattered states. 2. The canvas is the context. Unlike linear chats, you can…

    AI · 2025 · trickle.so

  • TB
  • Today marks ten years, 3653 consecutive days, of running at least one mile every day under the USRSA rules [1]. To celebrate, I built an interactive dashboard that turns a decade of GPX files into charts you can explore. Running has truly changed my life: I've made lifelong friends, explored beautiful places, and more importantly invested into my own health and fitness, which I'm starting to see the positive benefits as I get older. The stack is pretty simple: a NextJS app, with a Postgres database to keep all my running data, and all the stats are pre-computed and cached in Redis, so I…

    Dev tools · 2025 · nodaysoff.run

  • Made this website as an exercise in vibe-coding and GCP. It was posted about a few times around the internet, on sites like Morning Brew (https://www.morningbrew.com/issues/business-buzzkill), MetaFilter (https://www.metafilter.com/209703/Draw-A-Fish), boingboing.net, etc. I think it's cute! I built a basic CNN trained against penises and swastikas, and then anything that doesn't hit the 63% confidence score gets sent to a mod queue, a vibe-coded fish-tinder…

    AI · 2025 · drawafish.com

  • Hi HN - I made a site that takes a UK postcode, grabs the local MP's information and generates an AI mockup of what their ID might look like. It's a small, silly protest at the stupidity of the Online Safety Act that just came into force. edit - My open AI credits got hugged to death, please use a known postcode (like one from Kier Starmer's constituency, WC2B6NH) in the meantime.

    AI · 2025 · use-their-id.com