encrypted .env sync

share secrets across machines without sharing them in plaintext

EnvSync encrypts your .env locally, syncs the ciphertext, and decrypts on each trusted machine. No plaintext ever leaves.

live · pushing .env → 3 machines

STRIPE_SECRET_KEY⊕ encrypted

DATABASE_URL⊕ encrypted

OPENAI_API_KEY⊕ encrypted

synced to laptop · desktop · ci — plaintext never left this box

sync secrets Self-hosted. Free. No accounts required.

What you get

AES-256 encryption Variables are encrypted before leaving your machine. The server stores ciphertext only.

CLI-first Three commands: init, push, pull. Works in your terminal, in CI, in scripts. No web UI.

Self-hosted server An Express app with SQLite. Run it on your own infrastructure. No third-party cloud.

Team sync Push from one machine, teammates pull the latest. No more "can you send me the .env?"

Free

Self-hosted · unlimited projects · unlimited machines · no accounts