Heroku CLI now stores credentials in system keychains
Change effective on 01 July 2026
The Heroku CLI now stores authentication credentials in your system keychain by default, starting with version 11.8.0. This enhancement uses OS-native secure storage while maintaining full compatibility with existing workflows, including git push heroku main.
No action is required for most CLI users. Your next login automatically uses keychain storage if it’s available. CI/CD environments continue to work unchanged.
For more information about this change, see our blog post.