Digital security can be a really intimidating topic when you’re new, and even when you have some experience it still seems like more effort than it’s worth. As devs we often have most of the company keys on our laptops all the time because we sometimes need them, but advice on securing them is nonexistent, bad, or overly cumbersome. I’ll talk a bit about threat modelling to aid in making informed security decisions, and then mention some tooling that makes protecting your secrets easier to do.