You can check out EnvKey[1] as another option (I’m the founder). We have similarly simple UX but are more robust on security. Browser-based end-to-end encryption is a bit of a fig leaf—it doesn’t protect against insider threats. 1 - https://envkey.com. - Source: Hacker News / about 1 year ago

Hey, congratulations on the launch. How does this compare to EnvKey[1]? [1]: https://envkey.com. - Source: Hacker News / over 1 year ago

In most cases, attempting to roll your own secrets management (or just ignoring secrets management entirely) will end up spraying access across all kinds of third party services (usually in plain text), as engineers resort to sharing secrets via email, chat, file sharing, and other tools to get their work done. The cost/benefit/risk calculation to doing this yourself isn't good. Using open... - Source: Hacker News / over 1 year ago

If anyone out there is using environment variables currently, is interested a quick path to plugging the leaks in their secrets management, check out EnvKey[1] (disclaimer: I'm the founder). Because EnvKey integrates tightly with environment variables, no app code changes are needed to switch, so it only takes a minute or two to import/integrate a typical app. EnvKey is designed to help avoid incidents exactly... - Source: Hacker News / over 1 year ago

If anyone’s looking for something more secure than vanilla env vars but simpler than Vault, you could check out EnvKey[1]. Disclaimer: I’m the founder. It’s end-to-end encrypted, cloud or self-hosted, and very quick to integrate. 1 - https://envkey.com. - Source: Hacker News / almost 2 years ago

Hello, I have a question about sites like DeHashed.com, snusbase.com and intelx.io. Source: over 1 year ago

So if that is true, how could I go to the sites like https://intelx.io , https://dehashed.com/ ,https://snusbase.com/ and type email address that has been in a breach and obtain possible password and username sometimes for free, and sometimes for a couple of bucks? If what the OP of the linked post says is true. These platforms should not be legal, or am I missing something? Source: over 2 years ago

Usually it depends on where it will end up, you'll have to look through multiple different companies that pay to collect this information. Haveibeenpwned is a really great indicator to see the basics of where your information has been leaked through, but depending on the breach I'd recommend http://snusbase.com to get more details about what was contained in those databases. Source: almost 3 years ago

My favorites are theses 3, and are the most updated & fastest updated. - https://pwndb2am4tzkvold.onion.ws/ - https://snusbase.com/ - Dehashed.com (very nice but not free :/). Source: about 3 years ago