Encrypt, commit, and inject .env secrets — AES-256-GCM encryption, X25519 team sharing, zero cloud. Single binary CLI.
-
Updated
Apr 2, 2026 - TypeScript
Encrypt, commit, and inject .env secrets — AES-256-GCM encryption, X25519 team sharing, zero cloud. Single binary CLI.
sealenv is a security-first CLI tool built in Rust that prevents sensitive API keys and database credentials from being leaked in plain-text .env files.
🔐 Secure .env management for devs & teams — CLI + Web UI + Secret Scanner
[Deprecated] Local-first secret manager for the AI-agent era. Superseded by 1Password's agent-safe secret delivery; archiving on or after 2026-12-29.
CLI for secure environment variable management with GPG encryption and multi-environment support (dev/staging/prod)
⚡ Lightning-fast, local-first CLI tool for managing environment variables across projects. Zero setup, zero servers.
lazygit for your .env files — monorepo-native diff/sync TUI + JSON check for CI. By Martello Systems.
🛡️ EnvShield - Lightweight Environment Variable Security Management CLI Engine | 轻量级环境变量安全管理CLI引擎 - AES-256 Encryption, 15 Audit Rules, Source Scanner, Git Hooks, TUI Dashboard
Secure vault for .env files — encrypts them client-side (AES-256/Fernet) and stores them in a GitHub repo, with a web UI, CLI, and FastAPI backend.
Environment variables that expire and remind you — offline, cross-platform CLI + TUI. Manage global and per-project .env vars, track expiry with desktop notifications, and keep .env files out of git. Signed releases. Not a secrets manager.
OIDC Token Maintainer: Auto-refresh JWTs in .env files, inspect claims, and manage authentication for your local projects.
macOS Keychain-based secrets manager for exporting project .env files without storing API keys in plaintext.
To associate your repository with the env-management topic, visit your repo's landing page and select "manage topics."