pretty sharp idea for a very specific mess: credential sprawl on a mac dev machine. the tradeoff is obvious too. more control means more prompts and a little setup, which is probably fine if your real alternative is leaving api keys in dotfiles forever.
jitpass/jit
Just-in-time passwords and credential vault with Touch ID protection for macOS
3 ratings4.23
Saves55
CategoryDeveloper Tools
PlatformWeb
PricingFree
jitpass/jit is a macOS tool that finds plaintext secrets on your machine and moves them into a secured encrypted vault gated by Touch ID, injecting them just in time into authorized processes without modifying your workflows. It protects your secrets by replacing them on disk with decoys and requiring biometric prompts before credentials are provided to tools, enabling safer development environments without breaking existing tooling.
Ratings & Reviews
Write a reviewInformation
CategoryDeveloper Tools
PlatformsWeb
PricingFree
AccountNot confirmed
ListedAugust 2026
WebVisit
Report a problem
Around the Web
Show HN55 source points · 79 comments
Interesting idea! How do you achieve it? Some kind of file system driver that recognises the calling process?
vintagedave · Imported from Show HN
The install procedure, for something that's supposed to be a security product: curl -sL https://dl.jitpass.com/jitpass/jit/releases/latest/download/jitpass_darwin_arm64.tar.gz | tar -xz jit sudo mv jit /usr/local/bin/ What could possibly go wrong?
Animats · Imported from Show HN
I am actually building the exact same thing- encrypted vaults for files or folders, encrypted with a biometric gated key in the Secure Enclave!
efitz · Imported from Show HN
While this might be a useful tool for Mac users, it's all hackers here, so: * Most people do not have passwords in plain text — an SSH key protected with a passphrase is not "plain text", for instance * Most people have encrypted home or full disk encryption * How can we trust your crypto implementation? * If we are talking about in-memory plain-text during use, how does this tool protect against it? * Containerisation is a big topic when running untrusted software for exactly (but not just) this reason * While passwords/tokens might carry a big risk depending on what you do, I find that I worry more about my local data compared to my remote data — and virtualisation or containerisation helps with that.
necovek · Imported from Show HN
I don't know about how secure this is, but I just love the UX. Scanning and process grant are great features UX-wise.
zahrevsky · Imported from Show HN