I've been using secretive on the mac for exactly this.

Secretive is amazing! I know that it's not its purpose, but it would be great if it could store more than ssh keys, like providing a safe place for my .envs

▲

vulture916 4 hours ago | parent [-]

I know it's not open-source, but this is how I use 1Password with FIFO .envs. I'm unsure if 1P stores its SSH in the enclave, but it works the same way - whenever SSH key is accessed, it prompts for TouchID or password.

Besides the open source, any reason why I should use secretive over 1P?

- someone trying to be better about security no matter how annoyed.

	▲	petesergeant 3 hours ago \| parent [-]
		> I'm unsure if 1P stores its SSH in the enclave I am reasonably sure the answer is no, as evidenced by it being exportable