A safe place for every secret
AES-256-GCM encryption protects every value. Reveal only what you need, and trace every change.
YOUR SECRETS. ONE SOURCE OF TRUTH.
Goodbye, scattered
.env files.
Keep your application secrets secure, your environments in sync, and your team moving. From your first key to your next deploy.
No credit card Encrypted at rest Built for your terminal
PROJECT acme-api
Secrets
Access
Audit log
SecretsDevelopment
KEYVALUEVERSION
DATABASE_URL••••••••••••••••v1
STRIPE_SECRET_KEY••••••••••••••••v2
REDIS_PASSWORD••••••••••••••••v3
API_ACCESS_TOKEN••••••••••••••••v4
$ envault run -- npm run dev ↳ 4 secrets injected. Zero .env files.
LESS FRICTION. MORE SHIPPING.Security that fits
Security that fits
the way you build.
A workspace for your team.
A command for your workflow.
Every environment, organized
Separate development, staging, and production. Group credentials in folders and restore earlier versions.
Your terminal, connected
Sign in with your browser. Import, export, and inject secrets into any process with a single command.
Shared access. Clear boundaries.
Invite your team, assign roles, and issue scoped, expiring machine tokens for your CI pipelines.
Your next deploy starts here.
One vault. Every environment. Your whole team.
Get started with Envault