---
title: Guides — how to save keys on a Mac — ezkey.app
description: Direct answers for storing API keys on macOS with the login Keychain.
---

# Guides

Short answers to the questions people actually type. ezkey.app is a local menu extra for the login Keychain.

- [How can I save API keys securely on a Mac?](https://ezkey.app/guides/how-to-save-api-keys-securely-on-mac/): Login Keychain, not .env.
- [What is the best way to store API keys on macOS?](https://ezkey.app/guides/best-way-to-store-api-keys-on-macos/): Local Keychain vs a team vault.
- [Is it safe to put API keys in .env files?](https://ezkey.app/guides/is-it-safe-to-put-api-keys-in-dotenv/): Plaintext. gitignore is not encryption.
- [How do I store an OpenAI API key on a Mac?](https://ezkey.app/guides/how-to-store-openai-api-key-on-mac/): Do not append it to ~/.zshrc.
- [How do I use security add-generic-password?](https://ezkey.app/guides/security-add-generic-password/): Prompt for -w. Match -a and -s.
- [Is there a Keychain GUI for developers?](https://ezkey.app/for/developers/): Menu extra, same file as the CLI.
- [Where should local API keys live?](https://ezkey.app/for/local-api-keys/): login.keychain-db if they must not leave.
- [Keychain vs 1Password for API keys?](https://ezkey.app/compare/macos-keychain-vs-1password-for-api-keys/): Local drawer vs shared vault.
- [ezkey vs Keychain Access?](https://ezkey.app/compare/ezkey-vs-keychain-access/): Same database, smaller job.

Build from source: https://github.com/edtadros/ezkey