Private keys in Downloads

Keys you download (an App Store Connect .p8, a .pem, a .p12, an .env file and the like) often stay in Downloads. Rolltop notices them by their type and says: Keep it somewhere safer. Then remove this copy.

• Keep the key in a password manager or wherever your team keeps keys, then move this copy to the Trash.
• Rolltop never opens a key or reads what's inside.
• A tiny .key file is treated as a private key; a larger one is a Keynote presentation.
• Provisioning profiles are your call: Xcode keeps its own copy of profiles it uses.

The sidebar's Private keys counts the keys in Downloads.