End-to-end encryption for app secrets.
Superpowers for managing config.

🔒 No more sloppy secrets sharing → protect API keys, encryption keys, and credentials.

⚡️ Level up from .env files → keep developers and servers automatically in sync.

Open Source MIT License. Cloud or self-hosted.
Integrate in 2 minutes.

EnvKey is desktop-only.
Check back on desktop to download.

☠️ Prevent security incidents. Keep secrets away from code, email, chat, and browsers.

🛳 Ship faster. Prevent config bugs and keep environments in sync.

🐎 Tame your config. Prevent duplication and sprawl. Control access. Log everything.

🛠 Integrate anywhere. Works with every language, platform, and host.

Zillow Sky News 8x8 Qogita Leif Ginger RVShare Athletic Greens Lingoda The Daily Beast

Step 1

From development to CI to staging to production, securely manage configuration and secrets all in one place.

Step 2

Load your config anywhere. Reload automatically after a change.

$ envkey-source -- any-shell-command$ envkey-source -- command
# That's it!# That's it! Your command runs with the latest environment variables.

$ envkey-source -w -- ./start-server
# Automatically reload.# Automatically reload with the latest environment after a change.

More ways to load ˯

See it in action.

Watch Dane integrate EnvKey with an app in just a few minutes.

Uncompromising Data Security

Zero-knowledge end-to-end encryption with out-of-band verification ensures that no host, server, employee, or third party ever has access to your organization's secrets, unless it is specifically granted.

EnvKey's encryption is built with NaCl: a fast, modern, trusted cryptography standard.

EnvKey has eliminated a class of problem which absolutely plagued us, especially on new fast-moving projects, where you can't afford to lose half a day debugging some cryptic error message because there just happens to be a random new env var.

Gabriel Fortuna
Founder, Zero One

EnvKey has been such a lifesaver for our team at Soundstripe. Onboarding new developers was instantly streamlined as far as environment setups are concerned, and configuring servers has been simplified dramatically. We're hooked!

Trevor Hinesley
CTO, Soundstripe

First of all, I would like to say THANK YOU. EnvKey has solved a major problem for us, in managing our secrets really well. We rolled it out across our dev, staging and production environments yesterday, and it was a smooth, 15 minute process.

Devan Sabaratnam
Founder, HRPartner

Multi-layered security.

Audit logs
Combined Shape Created with Sketch. Device-based auth
Secure invitations
Artboard 23 Easy access control
OS keyring integration
Trusted IPs

Enhanced productivity.

Version control
Powerful, scriptable CLI
Auto-reloading environments
Environment branches
noun_boxes_3254207 Created with Sketch. Stackable config blocks
Custom environments
Environment inheritance
007 - Laptop Local development overrides
Data import/export
Conflict resolution
Change hooks
Account recovery keys

Flexible hosting.

Turn-key self-hosting
Multi-region redundancy
Behind-your-firewall mode

Advanced user management.

SCIM directory sync

Integrate in minutes. Save hundreds of developer hours.

EnvKey is desktop-only.
Check back on desktop to download.