Joshua

Joshua is an independent software publisher distributing open source tools through GitHub, with a catalog currently focused on developer and security utilities. Its flagship product, keyforge, is a local secrets management tool that generates and manages sensitive values such as API keys, tokens, and credentials directly on the user's machine. Rather than relying on cloud vaults or external services, keyforge seals stored secrets using Windows DPAPI (Data Protection API), meaning the encryption keys are tied to the current Windows user account and protected by the operating system itself. This approach places the product squarely in the developer tooling and security software categories, alongside password managers, credential stores, and configuration management utilities. Typical use cases include securing application secrets during local development, avoiding the common practice of storing plaintext credentials in environment files or source code, and simplifying secret rotation without introducing network dependencies. Because encryption and decryption happen entirely on the local machine, keyforge suits developers working in offline environments, teams standardizing on Windows workstations, and individuals who prefer to keep sensitive material under their own control rather than entrusting it to third party infrastructure. The tool complements common workflows in software development, DevOps, and IT administration, where managing access tokens and connection strings safely is a recurring need. As a single package publisher hosted on GitHub, Joshua follows the open distribution model typical of community driven projects, where source code is publicly available for inspection, contribution, and audit. The catalog's narrow focus suggests an emphasis on doing one task well: giving Windows based developers a straightforward, locally encrypted way to handle secrets without added complexity or external services.