Developer Tools●●●Banger
enveil – hide your .env secrets from prAIng eyes
Stops AI tools from reading .env files by never storing secrets as plaintext on disk.
Solve My ProblemNiche GemShip It
parkaboy
2011313mo ago
Back to browse
GitHub Repository
Keep secrets out of .env files. Encrypted vault with runtime injection — works locally or synced across a team via self-hosted server.
14 starsGo
Enveil–Encrypted vault that replaces .env files with runtime injection
by enveil·Mar 2, 2026·2 points·1 comment
AI Analysis
●●●BangerSolve My ProblemWizardryShip It
Runtime injection bypasses .env files entirely—secrets never touch disk.
Strengths
- •Argon2id key derivation + SQLCipher + AES-GCM = rigorous crypto, not handwaving.
- •Team server stores only ciphertext; client-side encryption means zero-knowledge model.
- •Eliminates entire class of accidents: committed .env files, shared secrets, AI tool exposure.
Weaknesses
- •Windows requires WSL2; native support would broaden adoption.
- •No audit logging or secret rotation features mentioned for team deployments.
Category
Target Audience
Backend developers, DevOps teams, security-conscious projects
Similar To
Hashicorp Vault · 1Password CLI · Doppler
Similar Projects
Developer Tools●●Solid
Sigyn – OSS native macOS secrets manager to replace .env (GUI+CLI)
Touch ID auth and Keychain integration beat 1Password's env tool on local-first workflow.
SlickSolve My Problem
conguy
223mo ago
Developer Tools●●Solid
EnvMaster – inject encrypted env variables from your terminal
Terminal-first secret management that rivals Doppler but stays in your CLI workflow.
SlickShip It
selixe_
302mo ago
Developer Tools●●Solid
Envref – separating secrets from config in .env files
Secrets-in-env is solved; this adds direnv integration and multi-backend resolution.
Ship ItSolve My Problem
xcke
103mo ago
Developer Tools●Mid
Keynest – a simple offline secrets manager
Encrypted .env replacement, but pass and sops already cover this.
Ship ItCozy
capydev42
102mo ago
Security●●Solid
Secret-keystore – KMS-encrypted .env that never touches process.env
KMS encryption that keeps secrets out of process.env entirely.
Big BrainSolve My Problem
faiz_ahmed
102d ago