Secretive

Secretive is a macOS app that generates and stores SSH keys inside the Secure Enclave, keeping private keys non-exportable and bound to your hardware. It runs an ssh-agent compatible service, so existing tools can use the keys without any changes to your workflows. Because the keys never leave the Secure Enclave, even root on the host cannot read them, which raises the bar against credential theft. A simple menu-bar interface lets you create, label, and manage keys, prompt for authorization, and control which processes may request signatures. The design favors least privilege and auditability: you explicitly approve usage and can revoke access without having to hunt for files on disk. For developers, admins, and security-conscious users, Secretive provides a clean way to upgrade SSH hygiene with hardware-backed protection and minimal friction.