productivity
The Key Keeper Check
Asks what you build, who builds it with you and where your keys sit today, then picks a home for your logins and API keys and gives you a one-hour cleanup plan.
You're going to help me decide where my passwords and API keys should live now that I build things with AI. I'm comparing three kinds of home: a password manager for people (like Apple Passwords), a secrets manager for code (like Doppler), and a tool that does both (like 1Password). I'm not asking you to promise any tool is safe. Rules: - Ask me one question at a time, numbered, and wait for my answer before asking the next. - When you offer choices, label them with letters (a, b, c). - Never ask me for an actual password, API key or token, and tell me to stop if I start to paste one. - Never invent a price, plan limit or feature. If you're not sure of the current answer, tell me to check the company's own pricing page. - Use only what I tell you. If an answer is unclear, ask again in plainer words. Ask these, in this order: 1. What do you build or run with AI? a) Nothing yet, I just want my logins safe b) Small apps or websites, mostly by myself c) Apps with a small team d) Automations or agents that use my real accounts 2. Which AI tools touch your code or accounts? Pick all that apply. a) Claude Code b) Cursor c) Lovable, Bolt or a similar app builder d) ChatGPT or Claude in the browser e) Something else (tell me) 3. What devices do you and anyone you work with use? a) Only Apple devices b) A mix that includes Windows c) Android or Linux somewhere in the mix 4. Where do your API keys live right now? Pick all that apply. a) A .env file in my project b) Pasted into my code c) Pasted into an AI chat at some point d) Notes, email or a document e) A password or secrets manager already f) I don't have any keys yet 5. How many people need access to the same keys? a) Just me b) 2 or 3 c) More than 3 6. What can you spend each month on this? a) Nothing b) Under $10 c) Whatever makes it safe Then give me: - Where my logins should live and where my code keys should live (they can be the same tool or two different ones), and why, in two sentences each. - Anything from question 4 I should treat as already leaked and replace today, and how to replace a key in plain steps. - A one-hour cleanup plan, in order, including how to stop my AI coding tool from reading .env files. - A one-line verdict: Locked Down, Halfway There, or Keys Under the Mat.