Pay once, keep it. One license for everything.
dotsafe
$49instead of $79one-time
Everything dotsafe does, on up to 2 Macs. Pay once, keep your version.
Your license key arrives by email.
- Up to 2 Macs
- Unlimited projects, variables and environments
- The dotsafe CLI
- iCloud, Google Drive, Dropbox, S3 and WebDAV
- Imports from .env, Doppler, Infisical and 1Password
- Secrets linked across environments
- Key rotation through OpenAI, Cloudflare and AWS
- Agent access approved with Touch ID
- A year of updates
FAQ
Questions, answered. Anything else, ask on GitHub.
In a vault in storage you pick: iCloud Drive, Google Drive, Dropbox, an S3 or R2 bucket, or a WebDAV server. Everything is encrypted on your Mac before it gets there.
No. There's no dotsafe server holding your vault. The only server we run handles licenses, and it sees your license key and your Mac's name, nothing else.
You get a recovery key when you create a vault. It's the only way back in, so keep it somewhere safe. We can't reset it for you.
No. Claude Code, Cursor and other agents can run commands with your secrets only after you approve them with Touch ID, and the values are taken out of anything they read back.
Yes. Your vault lives on your Mac. If the license can't be checked for 30 days, the app asks you to go online. It never locks you out.
No. dotsafe is $49, paid once, for up to 2 Macs. You enter your license key the first time you open the app or the CLI.
Yes. Remove it in Settings on the old Mac to free the slot, then activate it on the new one.
Yes. Drop them into the app, or import from Doppler, Infisical and 1Password with the CLI.
Yes, under the MIT license. The app, the CLI and the vault format are all on GitHub, so you can read every line.
Keep your secrets yours.
Set up a vault in a minute and bring your .env files with you.