Protect Your Secrets from AI & Accidental Leaks
Amulet is a hardware-bound secret manager designed for solo developers and AI-assisted workflows. No more .env files. No more accidental commits. Structurally secure.
Get Started in 3 Steps
01
Install
Install the CLI tool via your favorite package manager for your OS.
$
brew tap tsukasa-art/amulet && brew install amulet02
Seal (Encrypt & Save)
Securely encrypt your secret and bind it to your machine identifier.
$
echo -n "secret" | amulet seal OPENAI_KEY03
Use (Retrieve Safely)
Unseal your secrets in your code via the SDK or CLI. No traces on disk.
$
amulet unseal OPENAI_KEYHardware Binding
Secrets are encrypted and bound to your OS machine identifier. They only work on the machine they were sealed on.
AI-Safe Design
By reading from stdin, it structurally prevents AI coding assistants from seeing your secret values in command arguments.
Zero Trace
No server dependencies. Works fully locally. Ensures maximum privacy and offline availability for your workflow.
bash
# Store a secret
$ echo -n "sk-..." | amulet seal OPENAI_KEY --file secrets.vault
Passphrase: ***********
# Retrieve it (only works on this machine)
$ amulet unseal OPENAI_KEY --file secrets.vault