EnvVault. The key stays with you.

Your env file, encrypted

Keep the file. Keep the key.

Paste your .env, encrypt it in your browser, and share access with your team. EnvVault stores ciphertext. The key never reaches us.

Create a secret What we cannot recover

Encrypt in the browser

AES-256-GCM runs in this tab. The server stores the encrypted envelope only.

Label each secret

Create a secret, then label it Development, Production, Staging, or anything you choose.

Share the vault, not the key

Invite colleagues when you want them to see the vault. Give them each key separately.