# BlindPass

> BlindPass keeps secrets out of files. A free, open-source, native Mac app (Apple silicon, macOS 15 Sequoia or later) for API keys and tokens, each project's .env variables, two-step backup codes and recovery keys. Everything is in one encrypted file on the Mac, opened with Touch ID (Secure Enclave), with a printed Recovery Key as the backup. No account, no server, no sync.

## What it does

- **Add Item (⌘N):** paste anything secret; the value turns into dots, BlindPass recognizes the service (Stripe, OpenAI, Anthropic, GitHub, Supabase, Resend, AWS and more) and suggests where it goes. Warns about duplicates. Refuses crypto wallet phrases.
- **Projects:** drop a project folder; BlindPass reads its .env files (read-only), sorts them into Local, Preview and Production, checks .gitignore, and uses .env.example to show what's missing. Copy an environment as .env lines, or save a names-only .env.example.
- **Recovery:** backup codes that cross themselves off when copied, low-code warnings, and recovery keys with a printed-copy reminder.
- **Quick Access (⌥⌘K):** find and copy from any app. Copies are marked private (concealed/transient), skipped by clipboard history apps, and cleared after 60 seconds.
- **Locking:** Touch ID to open; locks with the screen, on sleep, when idle, and after 12 hours.
- **Import:** 1Password .1pux or CSV (Apple Passwords, Bitwarden, a sheet of keys). Passwords are skipped.
- **Shortcuts:** Add to BlindPass, Copy from BlindPass (Touch ID every time; never returns the value), Open Quick Access, Lock BlindPass.
- **The `blindpass` command:** `blindpass run -- npm run dev` injects a project's variables after Touch ID (no .env on disk); `blindpass env --export`, `blindpass xcconfig`, `blindpass run --file NAME` (secret file as a 0600 temp file), `blindpass check`, `blindpass guard` (pre-commit check), an optional zsh hook that loads variables on cd. The command is the app's own signed binary; the app checks the caller's signature.
- **AI agents:** an MCP server (`blindpass mcp`) for Claude Code, Cursor, Codex and Claude: list_secrets, check_env, request_secret, describe_policy. Names only, never values. Agents run commands through `blindpass run`, approved with Touch ID showing the command; live keys, never-for-agents items, shells, inline code, env/printenv, curl/ssh, git push and publishing are refused. Connect in Settings › Command Line & Agents.
- **Health:** exact-match search for saved values in linked projects and their git history, Claude Code/Codex/Cursor conversations and shell history, on the Mac, names and places only; one-click fixes; keys unused for 60 days and values saved twice.
- **Apple developer files:** App Store Connect .p8 keys, certificates, service-account JSON (up to 256 KB) in the vault; save a notarytool keychain profile; app-specific passwords recognised.
- **Rotation and hosts:** "Make New Key on <service>" opens the service's key page and replaces the key wherever it's used; Send to Host pushes a project's variables to Vercel, Netlify, Cloudflare Workers/Pages or Fly.io via their CLIs (values on stdin).
- **Activity:** what was copied or used, when and by whom; names only, inside the vault.

## What leaves the Mac

Nothing about the person or their vault. Once a day BlindPass asks GitHub for the latest release (can be turned off). Only if the person turns on Load icons from websites, it asks each saved website directly for its icon (no third-party icon service). Updates install in place only if signed by BlindPass's developer (team FDH2R76F98). When the person chooses Send to Host, that host's own command-line tool sends the values they picked to that service.

## Coming next

A Raycast extension, and sync between Macs once BlindPass has a Developer ID.

## Download

- Latest DMG (always the current version): https://downloads.leboube.ai/BlindPass.dmg
- BlindPass 1.1.0 DMG: https://downloads.leboube.ai/BlindPass-1.1.0.dmg (SHA-256 3ead14936dc48dc1871fe6af3fe93c2b128b7c453a6f0a2328ee056faa17eb2b)
- BlindPass 1.1.0 ZIP: https://downloads.leboube.ai/BlindPass-1.1.0.zip (SHA-256 07ae44865b0bb69325f60348b217b15660da01abae2c08ecfb19be7809502f95)
- Signed with a Developer ID and notarized by Apple: opens normally, no security prompt.

## Maker

- Made by Joe LeBoube: https://blindpass.leboube.ai · blindpass@leboube.ai