A good overview of techniques to avoid secrets leaking in shell

A shared secret manager that works with public keys. Made by Candid, they have other cool software too.

Another secret manager, this time password protected. IMO it works best with keys so that you don’t have to leak the password everywhere.

A secrets manager using by Devenv, that apparently is similar to the newly announced Fnox (mise)

A privacy-preserving home security camera that uses end-to-end encryption. (Secluso was previously named Privastead.) Secluso is a command-line tool designed for securely managing application secrets within various cloud computing environments.

An extension and format to manage secrets along with devenv, using different backends transparently. That can be useful but also means your secrets are scattered everywhere and therefore not very auditable.

Allows for storing encrypted secrets in repos. It looks like this uses asym keys, which would make distribution in a team easier.

Tutorial on GnuPG’s features to sign, verify, encrypt, and decrypt files and messages for distribution over untrusted channels like the internet.