Envsh – Zero-knowledge secret sync using your SSH keys
Reuses existing SSH keys for encryption so you don't manage new credentials.

Rust WASM bindings enforce type safety for age-encrypted secrets in the browser.
Developers managing dotfiles or config secrets in Git repos
1Password CLI · Bitwarden · git-crypt
Brower Local - All data is encryped and stored locally in your browser. It treats your git repository as the secret provider.
WASM - This app is made with Rust WASM which allows type-enforced safe secrets handling.
Reuses existing SSH keys for encryption so you don't manage new credentials.
GitHub sync for Claude Code configs with secret scanning before commit.
Finally solves the dotfile drift problem for AI agent skills with zero-config sync.
Temporary decryption with ctg run deletes plaintext after command, unlike sops or git-crypt.
Printable QR + human-readable fallback for offline recovery, no cloud dependency.
Yet another .env replacement; Doppler and Infisical already own this space.