Secretive
Keep SSH keys in the Secure Enclave
maxgoedjenThird-party software from public repositories. bestappfor.me does not host it, does not verify it and is not responsible for its use. Download only from the official source and check the license. Terms and disclaimer
About
Keep your SSH keys inside your Mac's Secure Enclave instead of on disk. Create keys, require Touch ID or Apple Watch before each use, and get a notification whenever a key is accessed. Macs without a Secure Enclave can use a smart card such as a YubiKey.
Keys held in the Secure Enclave cannot be exported, so malware cannot simply copy them. The trade-off is that they cannot be backed up or moved; on a new Mac you create new ones. Builds come from GitHub Actions with attestations you can check.
Highlights
- Non-exportable keys stored in the Secure Enclave
- Touch ID or Apple Watch approval for each use
- Notifications whenever a key is accessed
Who it's for
Good for developers on a Mac who connect over SSH and don't want private keys sitting in a folder.
This description was written by our editors with automated assistance, not by the developer, and has not been reviewed yet.
Why it is here
- Code changed 13 days ago
- New release 23 days ago
Official channels
Official channels only. We never host or repackage downloads.








