keyring
Encrypted by the OS
Tokens live in the platform keyring instead of plain-text files.
secret storage
Keep tokens out of plain text.
FluxGit stores credentials and account tokens in the OS keyring rather than plain text, and shows you the storage status, so the basics of secret hygiene are handled for you.
The problem: tokens end up in plain text.
Git credentials and forge tokens are easy to leave in plain-text config or scripts. That is a quiet security risk, especially on shared or corporate machines.
Honest beta limit
Credential storage uses the OS keyring, validated in service and tests. The keyring can be unavailable or fail in some environments, and FluxGit reports that clearly instead of hiding it.
How FluxGit helps.
status
Honest about availability
Storage status shows whether the secure backend is present and working.
accounts
Deliberate account setup
Forge accounts and tokens are managed explicitly, not scattered.
Privacy and security posture.
Credentials are stored locally in the OS keyring. FluxGit does not transmit your secrets.
Related features.
- Trust & Security explains your local security posture.
- AI Cortex keeps provider secrets local-first.
- MCP for agents blocks credential access from agents.