Your secrets are showing. Here's how to stop that.
Why environment variables are putting your business at risk — and what we built to fix it.
Get StartedYour secrets are showing. Here's how to stop that.
Why environment variables are putting your business at risk — and what we built to fix it.
Get StartedAn API key is the master key to your house. It opens everything. It works for anyone holding it. No questions asked.
So where do most apps keep that master key? On sticky notes, left on the desk. Developers just call them "environment variables" — same idea, fancier name.
What happens when a key gets out:
One leaked key = thousands of dollars in unexpected charges.
The problem's been obvious for years, but nobody fixed it — so in 2022 one developer started building the idea, and in 2025 WeaKV launched. It's a local, encrypted vault that lives on your own machine. Secrets never leave it, and they're never stored in plain text.
Three steps. That's the whole story. No plain text. Ever.
You lock your secret in the vault.
Your app requests the secret when it needs it.
Handed over safely — nothing written down, nothing left in plain text.
Build it in, or run it beside your app. Same vault, your choice.
Plug it straight into your code and fetch secrets programmatically.
A secure helper tool that runs alongside your app — it injects the secrets your script needs, then launches it. Nothing to import, nothing to change in your code.
Pick the one that matches the moment. Same vault, two settings.
On your laptop: fast and easy while you're still working.
On your server: locked down once real customers are using it.
import ctypes
def gs(s):
try:
a = ctypes.CDLL("./libweakv.so")
a.get_secret.restype = ctypes.c_char_p
a.get_secret.argtype = [ctypes.c_char_p]
return a.get_secret(s.encode("utf-8")).decode("utf-8")
except:
return "-1"
print(gs("secret"))Never travels over the internet, never sits in a config file, never lands in GitHub. It stays where you put it.
Zero running processes or background services. Just works when you need it.
All secrets are encrypted on disk. No more plain text files lying around.
Best effort to bind secrets to the calling script for added security.
Separate environments for development and production workflows.
Protects against casual scraping of compromised workstations and accidental commits.
Stop storing secrets in environment variables. Free to try — because the sticky note habit should have ended a long time ago.
Ready to stop storing secrets in plain text? Download WeaKV and secure your development workflow today.
| Platform / OS | Architecture | CLI | Library |
|---|---|---|---|
| macOS | Intel (amd64) | weakv-darwin-amd64.zip | libweakv-darwin-amd64.zip |
| macOS | Apple Silicon (arm64) | weakv-darwin-arm64.zip | libweakv-darwin-arm64.zip |
| Linux | Intel/AMD (amd64) | weakv-linux-amd64.zip | libweakv-linux-amd64.zip |
| Linux | ARM64 | weakv-linux-arm64.zip | libweakv-linux-arm64.zip |
Available for Linux, macOS