DEVELOPER
Zero-Knowledge .env Vault
Share sensitive .env files with your team using military-grade encryption in your browser. The server never sees your raw secrets.
Zero-Knowledge .env Sharer
Your .env file is encrypted in the browser with AES-GCM using a key derived from your password, so the server never sees your raw secrets or your password. This tool is not local-only: the encrypted result is uploaded to our server (Supabase) so the link can be opened on another device. See the Privacy Policy.
How it works
When you paste your .env file and enter a password, your browser generates a secure key using PBKDF2 and encrypts the file using AES-GCM. Only the encrypted blob is sent to our servers. When your teammate opens the link, the reverse happens on their machine. We literally cannot read your secrets.
How to use this tool
- Paste your .env file into the Encrypt tab.
- Enter a strong password.
- Send the generated payload or link to your teammate.
- They use the Decrypt tab and the password to read the secrets.