SecretKeeper
Secure local storage for API keys, tokens, and credentials. Quick access without leaving VS Code.
Features
- 🔒 Secure Storage: Uses VS Code's SecretStorage API with OS-level encryption (Windows Credential Manager, macOS Keychain, Linux libsecret)
- 🌍 Global & Workspace Secrets: Store secrets globally or per-workspace
- 🔍 Quick Retrieval: Searchable dropdown to find and copy secrets instantly
- ⏱️ Auto-Clear Clipboard: Automatically clears clipboard after 5 minutes for security
- 🏷️ Categories: Organize secrets with predefined or custom categories
- 🚫 Never Syncs: Secrets stay local and never sync via Settings Sync
Screenshots
Command Palette
Adding a Secret
Enter the secret name:
Enter the secret value (hidden for security):
Retrieving a Secret
Deleting a Secret
Usage
Add a Secret
- Open Command Palette (
Ctrl+Shift+P / Cmd+Shift+P)
- Type
SecretKeeper: Add Secret
- Follow the prompts:
- Enter secret name (e.g., "GitHub PAT")
- Enter secret value (displayed as password/hidden)
- Choose scope (Global or Workspace)
- Select category (optional)
Retrieve a Secret
- Open Command Palette
- Type
SecretKeeper: Retrieve Secret
- Search/select your secret from the list
- Secret is copied to clipboard (auto-clears in 5 minutes)
Delete a Secret
- Open Command Palette
- Type
SecretKeeper: Delete Secret
- Select secret to delete
- Confirm deletion in the warning dialog
List All Secrets
- Open Command Palette
- Type
SecretKeeper: List All Secrets
- View organized list of all secrets (names only, values hidden)
Security
- OS-Level Encryption: Secrets are encrypted using your operating system's native credential manager
- Isolated Storage: Each extension has isolated storage; other extensions cannot access your secrets
- No Sync: Secrets intentionally do not sync via VS Code Settings Sync
- Auto-Clear: Clipboard automatically clears after 5 minutes
- Local Only: Secrets never leave your machine
Security Limitations
SecretKeeper is designed for development workflow convenience, not as a replacement for dedicated password managers like 1Password or Bitwarden. Use it for:
- ✅ API keys and tokens you use frequently in development
- ✅ Credentials scattered in text files or
.env files
- ✅ PATs (Personal Access Tokens) for GitHub, GitLab, etc.
Do not use it for:
- ❌ Banking or financial credentials
- ❌ Production infrastructure secrets (use proper secret management tools)
- ❌ Sharing secrets with team members
Categories
Predefined categories include:
- AWS
- Azure
- GitHub
- GitLab
- Database
- API Keys
- Tokens
- Credentials
- OAuth
- SSH Keys
- Other
You can also create custom categories or skip categorization entirely.
Commands
| Command |
Description |
SecretKeeper: Add Secret |
Add a new secret |
SecretKeeper: Retrieve Secret |
Copy a secret to clipboard |
SecretKeeper: Delete Secret |
Delete a secret permanently |
SecretKeeper: List All Secrets |
View all stored secrets (names only) |
FAQ
Q: Where are secrets stored?
A: Secrets are encrypted and stored in your OS credential manager (Windows Credential Manager, macOS Keychain, or Linux libsecret).
Q: Do secrets sync across machines?
A: No, secrets are intentionally local-only and do not sync via VS Code Settings Sync.
Q: Can other extensions access my secrets?
A: No, VS Code's SecretStorage API provides isolated storage per extension.
Q: What happens if I uninstall the extension?
A: Secrets remain in your OS credential manager. Reinstalling the extension will restore access to them.
Q: Can I export/import secrets?
A: Not in the current version, as this would pose a security risk.
Q: What's the difference between Global and Workspace secrets?
A: Global secrets are available in all VS Code workspaces. Workspace secrets are only available in the specific workspace where they were created.
Contributing
Contributions are welcome! Please open an issue or submit a pull request on GitHub.
License
MIT
Release Notes
1.0.1
- Added screenshots demonstrating all features
- Duplicate name detection with Replace/Create Duplicate options
- Fixed extension activation issues
- Improved documentation
0.0.1
Initial release of SecretKeeper
- Add, retrieve, delete, and list secrets
- Global and workspace scope support
- Auto-clear clipboard after 5 minutes
- Category organization
- OS-level encryption
