Locksmith: Store Maven Secrets in the macOS Keychain (Or a Unix Socket)

Hacker News

Hello HN, In the age of LLMs sucking in random secrets, sandbox escapes, and RCE orbital bombardment, I thought it'd be a good idea to create a Maven Extension that defers to the MacOS keychain for resolving secrets. In general, it's a good idea to not have any secrets (passwords, tokens, etc) stored in plaintext files. Also, this allows your machines to be FIPS-140 complaint, if thats a thing for your job. Locksmith is a Maven Core Extension that defers to the MacOS Keychain. The entry format in settings.xml looks like: `{[type=locksmith]nexus.superbiz.example.com/username}` This was a fun project and I used the Project Panama FFM with jextract for the first time. The FFM is a great iteration on JNI (which still has it's place) and was pretty much brainless to use. Setup is quick and easy and I tried to make the readme as friendly as possible. As an aside, I've also architected the core Library indecently from the Maven bits, so if you do need to read from the MacOS keychain in a project, you could pull the core Library in without dragging in Maven. Being 2026, of course Claude was used to assist in the creation of the project, however Locksmith is not vibecoded top-to-bottom. I personally loathe AI slop. I use LLMs as a tool, not a crutch. Enjoy!

Visit product View on Hacker NewsSep 9, 2026

Share card

Actual performance

3points

1comments

Did not reach leaderboard

Launch Intel predictions

Analyze your own launch →

Indie HackersFits the IH revenue-focused audience · Missing: supports, reddit linkedin, podcasting

86%86% predicted probability of success on Indie Hackers, based on ML models trained on real launch data.

best fitHighest predicted score across all platforms for this description.

Product HuntOn track for Day 1 leaderboard · Strong signals: mac, macos, claude · Missing: agents, agent, cursor

70%70% predicted probability of success on Product Hunt, based on ML models trained on real launch data.

Hacker NewsMay not resonate with HN audience · Strong signals: ide, io · Missing: https docs, excited, just released

44%44% predicted probability of success on Hacker News, based on ML models trained on real launch data.

nativeThis product was originally launched on this platform.

AppSumoMay struggle as an AppSumo deal · Strong signals: friendly · Missing: plus, platform, intuitive

37%37% predicted probability of success on AppSumo, based on ML models trained on real launch data.

TrustMRRLess likely to generate early MRR · Strong signals: personal · Missing: mobile apps, ios, entrepreneurs

34%34% predicted probability of success on TrustMRR, based on ML models trained on real launch data.

Acquire.comPre-revenue stage for this audience · Missing: arr, mrr, revenue

11%11% predicted probability of success on Acquire.com, based on ML models trained on real launch data.

BetaListMay not resonate with beta-testers · Missing: web3, chat, crypto

0%0% predicted probability of success on BetaList, based on ML models trained on real launch data.

Correct prediction on native model

Similar products

Use macOS keychain to store secrets46%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Use macOS keychain to store secrets

Hacker News3

A microservice for splitting and recombining secrets54%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

A microservice for splitting and recombining secrets

Hacker News1

Dwellable Secrets (nice data viz with d3)56%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Dwellable Secrets (nice data viz with d3)

Hacker News4

BitNote – Using browsers and blockchains to store secrets44%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

BitNote – Using browsers and blockchains to store secrets

Hacker News2

Share secrets with Glitch48%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Share secrets with Glitch

Hacker News1

Urban Secrets Face Masks51%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Urban Secrets Herbal products

Indie Hackers2$4,000/mofashion

Env files aren't meant for storing secrets48%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Env files aren't meant for storing secrets

Hacker News3

Secs-man, a secrets manager you can (not) rely on57%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Secs-man, a secrets manager you can (not) rely on

Hacker News31

Knox, Secrets as a Service52%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Knox, Secrets as a Service

Hacker News19

Kevlar.io – Secrets that when accessed are deleted permanently69%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Kevlar.io – Secrets that when accessed are deleted permanently

Hacker News35

Browse all products Analyze your launch