PX Secrets

C
C tier on Secrets Management ToolsScore 5.8 · #34 of 40
Android app
Not listed
Free plan
Yes
Runs on
api, Linux, Mac, self-hosted, Web, Windows
github.com
The PX Secrets homepage

Summary

PX Secrets is ranked #34 of 40 in secrets management tools on Everything Xiaomi. It runs on API, Linux, macOS, Self-hosted, Web, Windows. There is a free plan.

PX Secrets plans and pricing

All plans
PX Secrets Free Free and open-source · local secrets vault · AGPL-3.0 github.com · 9 Oct 2026

Compared on secrets management tools

Free plan
Yesgithub.com
Secret rotation
Nogithub.com
CI/CD injection
Yesgithub.com
Kubernetes integration
Yesgithub.com
Deployment model
self_hostedgithub.com

Facts

Purpose
PX Secrets is a free, open-source secrets manager that stores an encrypted vault on the user's machine.github.com · 9 Oct 2026
Encryption
It encrypts the vault on disk with SOPS and AGE, and the repository says the private AGE key is read directly by SOPS and never touched by PX Secrets.github.com · 9 Oct 2026
Interface
It provides a dark web UI with search and service grouping, plus an optional native desktop window using pywebview.github.com · 9 Oct 2026
CLI
The CLI can list services and retrieve secrets by name for scripts.github.com · 9 Oct 2026
Local API
A local API lets scripts and AI agents retrieve secrets at runtime, and the app can run headlessly as a background service.github.com · 9 Oct 2026
Integrations
The README documents SOPS and AGE dependencies, Docker deployment, and runtime use by scripts, AI agents, and CI/CD pipelines.github.com · 9 Oct 2026
Privacy
The project states it makes no network calls and collects no telemetry, analytics, usage tracking, or crash reports.github.com · 9 Oct 2026
Clipboard
Copied secrets are automatically cleared from the clipboard after 30 seconds.github.com · 9 Oct 2026
Temporary data
The README says decrypted data is held in memory and temporary plaintext files are deleted after encryption.github.com · 9 Oct 2026
API security limit
The local API is unauthenticated by default; the README warns against exposing port 9999 outside the local host or a trusted private network without authentication.github.com · 9 Oct 2026
Optional authentication
Setting PX_SECRETS_AUTH_TOKEN requires a bearer token for API requests, and read-only mode can disable mutating endpoints.github.com · 9 Oct 2026
Key recovery limit
The README states that losing the AGE private key means the encrypted vault cannot be recovered and that there is no reset or backdoor.github.com · 9 Oct 2026
Requirements and platforms
The stated requirements are Python 3.9+, SOPS, and AGE; macOS and Linux are listed as supported, while Windows may work but is untested.github.com · 9 Oct 2026
License and support
PX Secrets is licensed under AGPL-3.0, with bug reports handled through GitHub Issues and questions and ideas through GitHub Discussions.github.com · 9 Oct 2026
Intended users
The README describes it as suited to developers, AI builders, homelabbers, and sysadmins.github.com · 9 Oct 2026

Best PX Secrets alternatives

See all 20

Where it ranks on Everything Xiaomi

Is PX Secrets yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Sources