Your .env files.
Everywhere.
Encrypted.

Push your environment variables from one machine, pull them on another. AES-256 encrypted, zero cloud accounts, self-hosted.

Get started View docs →

~ envsync

envsync push --project api 12 vars synced

envsync push --project web 8 vars synced

envsync pull --project api 12 vars restored

envsync diff --project web 2 changed review

envsync push --project workers 5 vars synced

What you get

End-to-end encryption

Variables are encrypted before they leave your machine. The server stores ciphertext only. Even if compromised, your secrets are safe.

AES-256

CLI-first workflow

envsync push and envsync pull. That's it. No web UI, no dashboards, no accounts. Works in your terminal, in CI, in scripts.

push + pull

Self-hosted server

Run the server on your own infrastructure. A single Express app with SQLite. No external dependencies, no third-party cloud.

Team sharing

Multiple developers can sync the same project. Push from your machine, teammates pull the latest. No more "can you send me the .env?"

For developers who don't trust .env files in Slack DMs

EnvSync exists because sharing secrets through chat, email, or shared drives is a security incident waiting to happen. Your .env files deserve the same encryption as your passwords.

Your .env files.Everywhere.Encrypted.