Stop Pasting Credentials in Slack
AES-256-GCM with key in URL fragment—clever crypto choice, but Teleport and 1Password Vaults already exist.
Secure, ephemeral secret sharing for developers.
Makes secure path faster than Slack for sharing secrets—age encryption, SPAKE2, self-hostable.
DevOps engineers, development teams, freelancers sharing credentials securely
1Password Connect · HashiCorp Vault · AGE encryption
# recipient $ enseal receive 7-guitarist-revenge ok: 14 secrets written to .env Zero setup, no accounts, no keys needed for basic use. Channels are single-use and time-limited. The relay never sees plaintext (age encryption + SPAKE2 key exchange). For teams that want more: identity mode with public key encryption, process injection (secrets never touch disk), schema validation, at-rest encryption for git, and a self-hostable relay. Written in Rust. MIT licensed. Available via cargo install, prebuilt binaries, or Docker. Looking for feedback on the UX and security model especially. What would make you actually reach for this instead of the Slack DM?
Detailed documentation here: https://enseal.docsyard.com/
AES-256-GCM with key in URL fragment—clever crypto choice, but Teleport and 1Password Vaults already exist.
KMS encryption that keeps secrets out of process.env entirely.
Typed secret schemas for agents beat pasting API keys into LLM prompts.
Drop-in Slack alternative with verifiable crypto, but one-time secret sharing exists.
Client-side AES-256-GCM for .env sharing, but Wire, OnePassword, and Bitwarden vaults already solve this.
Touch ID auth and Keychain integration beat 1Password's env tool on local-first workflow.