Guides
Where to keep the things you’re told to keep safe: API keys, a project’s .env, backup codes and recovery keys. Each guide starts with the general answer, then shows how Slinky does it.
Where to keep API keys on a Mac
Out of notes, chats and project folders, and into one encrypted place.
Keep .env files out of git
Check .gitignore, share names not values, and stop a commit with a key in it.
Where to save two-factor backup codes
The codes a website tells you to keep somewhere safe, and how to find them later.
Let AI coding tools use your API keys without seeing them
Claude Code, Cursor and Codex can run your app without the keys entering the chat.
Keep your App Store Connect API key safe
The .p8 file, its Issuer ID, and a notarytool profile, out of your Downloads folder.
