SikkerKey

We just released a new and completely free tool: https://sikkerlink.com/

The concept is fairly simple: Create a link containing a secret that destroys itself after its been read. It's zero-knowledge (encrypted client-sided), meaning SikkerKey never sees the secret, just the ciphertext.

Hey Hackers,

Happy to introduce SikkerKey, a different approach to a secure secrets vault and management platform.

SikkerKey takes advantage of an age-old technology that's deployed worldwide but hasn't made it to the SecretOps domain yet: asymmetric key-pair authentication, through the entire retrieval process — not just to mint you a bearer token with an arbitrary TTL.

Your application, website, machine, or container signs a request with a private key SikkerKey has never seen. It proves it is who it says it is, and SikkerKey hands back the secret it asked for. The request itself can't be replayed, it's not stored anywhere, and it's alive for the exact duration of the request.

Sounds complex? Sure is, but SikkerKey hides the complexity behind a readonly and lightweight CLI, SDKs in five different languages, and easy-to-understand, seamless UIs.