Secrets Management Survival Guide

Contact

Updated 17 May 2026

Who I am

I’ve written pseudonymously — not out of secrecy, but because the guide should stand on its own merits. If the ideas are sound, they are sound regardless of who wrote them. If they are flawed, they should be challenged on those grounds. Part of my goal in publishing this guide is to collaborate with others to fill any gaps in my understanding.

This guide was built first and foremost for me, and then I could not find a good reason to keep it private.

I’m a software engineer with about 10 years of industry experience behind me. But I am not a security expert. And I think that is a good thing. I am the “technical person” in my circle.

My credentials that I think is sufficient for writing this guide

  • My software engineering background means that I can read and understand the first-principals behind the technical details of cryptography and security tooling.
  • I am very practical. I have zero tolerance for over engineered solutions. Good enough is good enough.
  • I have skin in the game. I’m running this protocol in my own life… and now I’ve published it for all to see. If it has flaws people will mock and exploit it.

What is my ulterior motive?

I’m an avid advocate for individual freedom and sovereignty — and even more so for true, trusting relationships between people. That’s the bedrock of society. Secrets management done well is not just a security practice - it’s an act of care. I’m using this very practical problem as a gateway to make that case.

Community

I am deliberately not building an active or visible community around this work. No monthly newsletter, no forum, no “like and subscribe.” There is nothing wrong with any of that in general — it just cuts against the philosophy of the manual. If someone wants to spin up a subreddit, they are welcome to; I would gently advise against it.

That said, I am not going to publish this and disappear behind the pseudonym. I will engage in discussions about these ideas wherever they happen, and defend or revise them in public.

I do value feedback and collaboration. A handful of careful, well-considered notes from people who take this seriously is worth far more to me than a busy comments section. If that is you, the email address below is the right channel.

Contact Me

TODO, set up protonmail account