In your pouch
What goes in your pouch
Five kinds of thing, eight categories, how Carriel names them, and how much a pouch holds.
Your pouch is for the small private things you reach for: the ten to fifty you’d otherwise keep on a sticky note, in a chat or in a note.
Five kinds
| Kind | Holds | Shown without Touch ID |
|---|---|---|
| Key | API keys, tokens, webhook secrets, private keys | Its kind and length, and the env name it maps to |
| Password | A password, with its account and where it’s used. PINs, door codes and Wi-Fi too | Its account and where |
| Recovery codes | A sheet of one-time codes | How many are left |
| Note | Free text, such as an .env block kept whole | How many lines, or an .env block’s names |
| File | Any file up to 10 MB: a .p8, a .p12, a JSON key, a scan | Its type and size |
Eight categories
Every thing sits in one of eight categories. They have fixed numbers, the same in the card, the panel and the window, and a category with nothing in it stays out of sight.
| Shortcut | Category | For |
|---|---|---|
| ⌘1 | AI | Keys for AI services |
| ⌘2 | Dev tools | Code hosts, package registries, monitoring, mail and messaging services, Apple keys, .env blocks |
| ⌘3 | Cloud & data | Cloud providers, databases, connection URLs |
| ⌘4 | Payments | Payment services |
| ⌘5 | Accounts | Passwords and recovery codes |
| ⌘6 | Home | Wi-Fi and door codes |
| ⌘7 | Documents | PDFs, images, any file that isn’t a key |
| ⌘8 | Other | Whatever’s left, such as license keys |
How Carriel names things
Carriel recognises keys from more than 80 services by their shape, and names them by what they are, such as “Stripe live secret”. A name never uses the characters of the value: not a key’s first letters, not a note’s first line, not a server name inside a database address. When Carriel doesn’t know something, it leaves the name for you and chooses Other.
A few things it treats specially:
- An
.envblock splits into one thing per secret, or stays whole as one note. - An Apple
AuthKey_….p8file asks whether it’s for App Store Connect or Push notifications. - A list of one-time codes, such as 16 lines of the same shape, becomes recovery codes.
- A Wi-Fi QR string (
WIFI:S:…;P:…;;) becomes a Wi-Fi password, with the network as where it’s used.
How much a pouch holds
| Limit | How much |
|---|---|
| Things, free | 25, with every feature |
| Things, with the bigger pouch | 100, with a quiet line at 50 |
| A key or a password | 64 KB |
| A note | 256 KB |
| A file | 10 MB |
| Everything together | 100 MB |
| Recently Deleted | 30 days, on every Mac |
Not in Carriel 1.0
Cards, two-factor codes, passkeys, sharing, tags, folders and an iPhone app. Carriel stays small on purpose: it never fills in forms or passwords for you.