v1.0.0 — Now available

  ███████╗███╗   ██╗██╗   ██╗██╗   ██╗
  ██╔════╝████╗  ██║██║   ██║╚██╗ ██╔╝
  █████╗  ██╔██╗ ██║██║   ██║ ╚████╔╝ 
  ██╔══╝  ██║╚██╗██║╚██╗ ██╔╝  ╚██╔╝  
  ███████╗██║ ╚████║ ╚████╔╝    ██║   
  ╚══════╝╚═╝  ╚═══╝  ╚═══╝     ╚═╝

Never leak a secret again.

AES-256 encrypted .env management for teams and solo devs. Compare environments, audit git history, ship safely.

$ curl -fsSL https://raw.githubusercontent.com/anastanveer653/envy/main/install.sh | bash

View on GitHub See demo →

Live demo

See envy in action

~/my-project

# Initialize envy in your project $ envy init ⚡ Initializing envy in ~/my-project Create master password: •••••••••••• Confirm master password: •••••••••••• ✓ Encrypted store created ✓ Environments: development, staging, production ✓ Added .envy/store.enc to .gitignore # Store a secret (encrypted with AES-256) $ envy set DATABASE_URL postgres://user:pass@db.prod.com/app --env production Master password: •••••••••••• ✓ DATABASE_URL → [encrypted] in production # List secrets (values safely masked) $ envy list --env production Master password: •••••••••••• Environment: production (3 secrets) API_KEY = sk**************23 APP_NAME = my**app DATABASE_URL = po**********************************pp # Compare dev vs production — find missing keys $ envy diff development production development vs production + SENTRY_DSN (only in production) ~ DATABASE_URL (values differ) # Audit git history for leaked secrets $ envy audit 🔍 Scanning git history for secrets... ✓ No secrets found in git history!

Features

Everything you need. Nothing you don't.

🔒

AES-256-GCM Encryption

Military-grade encryption with PBKDF2 key derivation. 100,000 iterations. Unique salt per store. Your master password never touches disk.

🌍

Multi-environment

Manage development, staging, and production secrets separately in one encrypted store. Switch with --env or ENVY_ENV.

🔍

Git Audit

Scan your entire git history for accidentally committed .env files or hardcoded secrets. Detects AWS keys, GitHub tokens, Stripe keys, and more.

📋

Environment Diff

Compare two environments side by side. Instantly spot missing keys, mismatched values, or config drift before it causes production incidents.

📥

Import / Export

Seamlessly migrate from existing .env files. Export back when you need to. Works with dotenv, direnv, and any tool that reads .env format.

⚡

Single Binary

No runtime. No Docker. No npm install. One binary written in Go. Instant startup. Works on macOS, Linux, and Windows. Zero dependencies.

Comparison

How envy stacks up

Feature	envy	dotenv	direnv	1Password CLI
Encryption	✓ AES-256	✗	✗	✓
Multi-environment	✓	✗	✓	✓
Git audit	✓	✗	✗	✗
Env diff	✓	✗	✗	✗
Single binary	✓	✗	✓	✓
Free & open source	✓ MIT	✓	✓	✗ paid
No cloud required	✓	✓	✓	✗

Never leak a secret again.

Stop leaking secrets.