Rot - Offline secrets management

In plain words

Rot is an open-source tool for managing secrets offline, designed for teams that need to store encrypted sensitive data in version control. It works similarly to SOPS but with a more opinionated approach that simplifies configuration and generates cleaner git diffs. A distinguishing feature is one-way encryption support, allowing users to add secrets without access to private keys. The tool is intended for developers and DevOps teams seeking straightforward secret management.

written from the facts on this page · September 2026

From the sources

Boring Cryptography Tooling for Humans. Contribute to candiddev/rot development by creating an account on GitHub.

• 
  SecretCrypt – Keeping secrets in plain sight2016 · zemanta.github.io · ▲75
• 
  A password manager using Keybase for encryption and storage2017 · github.com · ▲172

  A secret manager backed by Keybase and KBFS. Contribute to kbsecret/kbsecret development by creating an account on GitHub.

• 
  1Password Developer Tools2022 · 1password.com · ▲105

  Develop faster, eliminate complexity, protect your secrets

• 
  AxKeyStoreFeb 2026 · github.com · ▲31

  Hi HN, I built AxKeyStore, an open-source CLI tool for managing secrets that uses your own private GitHub repository as encrypted storage. The idea is simple: → All encryption happens locally. → Secrets are stored as encrypted blobs in your private repo. → GitHub is treated as untrusted storage. → No plaintext secrets ever leave your machine. → No plaintext secrets are stored on disk. Most secret managers either require a hosted backend, a self-hosted server, or trusting a SaaS provider. I wanted something that: → Requires zero infrastructure → Uses tooling developers already have → Keeps…

• GT
  GitHub-to-sops: Easy way to manage passwords/keys with GitHub and SOPS2024 · taras.glek.net · ▲10

  I think I found the most minimalist way to share secrets between devs and infra. What do you think? https://github.com/tarasglek/github-to-sops PS. I'm not a security guy, go easy on me.

• 
  One Time Secret2023 · github.com · ▲60

  Share your confidential data with ease

• 
  SimCity, but with Permits▲877

  A free city-building game in your browser. You are the mayor. You know what the city needs. Now get it past the zoning board, the neighbors, the appeals court and the next election.

  Life & fun · 22h ago · permit.petercai.com

• IV
  I've been paying for a rural Tanzanian's education for 10 years▲778

  Life & fun · 13d ago · tanzaniaeducationproject.org

• 
  Bigwords.page – Turn any screen into a sign. The URL is the app▲728

  Turn a phone, tablet or TV into a sign. Type a message and it fills the screen: welcome signs, timers, Wi-Fi passwords and more. No app, no account, free.

  Life & fun · 14d ago · bigwords.page

• 
  Guitoro, a virtual guitar you strum with your keyboard▲573

  Play a free virtual guitar online with your keyboard or by touch. Slow songs down and see every chord, string and strum. Acoustic, classic, electric and bass.

  Life & fun · 8d ago · guitoro.com

• 
  See *almost* any carriers phone settings▲432

  Carrier settings from iPhone, Pixel and Galaxy firmware, decoded and compared: APNs, VoLTE, 5G and Wi-Fi Calling per carrier, and what each build changed.

  Life & fun · 12d ago · carrierexplode.com

• 
  The whole Solar System and every tracked satellite, live in the browser▲407

  Life & fun · 22d ago · space.bl2.net

• 
  Beeper Mini – iMessage client for Android▲1,521

  Hi HN! I’m proud to share that we have built a real 3rd party iMessage client for Android. We did it by reverse engineering the iMessage protocol and encryption system. It's available to download today (no waitlist): https://play.google.com/store/apps/details?id=com.beeper.ima and there's a technical writeup here: https://blog.beeper.com/p/how-beeper-mini-works. Unlike every other attempt to build an iMessage app for Android (including our first gen app), Beeper Mini does not use a Mac server relay in the cloud. The app connects directly to Apple…

  Work · 2023 · beeper.com

• 
  Heynote – A dedicated scratchpad for developers▲1,063

  Hey! I made Heynote entirely for my own use case. For many years, I always had an Emacs instance running with the scratch buffer open, even long after I had abandoned Emacs as my programming editor in favor of more recent IDE:s. The simplicity of having just one big scratch buffer appeals to me, but I still want to separate the different things I jot down somehow (without using tabs or similar). Previously, my solution was to insert a bunch of blank lines between the notes, but hitting C-A would still select the entire buffer. That's why I came up with the concept of "blocks", which turned…

  Work · 2023 · heynote.com

• 
  LogoFast▲988

  Make beautiful logos with AI, fast & free

  AI · 2023 · logofa.st

• 
  FuseBase▲939

  Client collaboration platform for professional services

  Dev tools · 2023 · thefusebase.com

• 
  Beep! 2.0▲871

  Fastest tool to assign and share visual tasks with your team

  Work · 2023 · justbeepit.com

• 
  Inbox Zero▲821

  Clean Up Your Inbox In Minutes Newsletter management, AI automation, and email analytics. Inbox Zero is the open-source email app that puts you back in control of your inbox.

  AI · 2023 · getinboxzero.com