Local Dev Secret Management with 1Password and Bitwarden
Most developers have a graveyard of dotfiles, .env files, and Slack DMs containing tokens that were supposed to be temporary. This post describes the pattern I use to keep all local dev secrets in a password manager and inject them into my shell on demand — nothing sensitive ever touches disk. The full setup lives in my dot-local repo on GitHub, including the helper functions and new-machine setup guide. The Problem I work across multiple machines: a work Mac that uses 1Password and a personal Mac that uses Bitwarden. I needed a single pattern that worked on both without maintaining two separate codebases or hardcoding tool-specific logic everywhere. ...