Features

Everything you need for secure secret management

Envie provides all the tools your team needs to manage secrets securely, without compromising on usability.

Environment Variables

Environment Variables

Store and manage your environment variables with military-grade encryption. Every secret is encrypted on your device before being synced to your team.

  • End-to-end encrypted storage
  • Easy copy and export to .env files
  • Organize with categories (Dev, Staging, Prod)
  • Share securely across your team
api-backend/Production
Encrypted
DATABASE_URLProduction
postgres://user:***@db.example.com
API_KEYProduction
sk_live_***************
JWT_SECRETAll
*********************
3 variablesLast synced: just now
Local File Sync

Local .env File Sync

Link any Envie project to a local .env file on your computer. Each device can have its own linked file, and you control when to sync - push your local changes or pull the latest from your team.

  • Link different .env files per device
  • Automatic change detection
  • Push local changes to share with team
  • Pull remote updates to local file
my-app
Synced
/Users/dev/my-app/.env
Linked on this device

Pull overwrites local file • Push uploads to Envie

Local file changed
Push to sync
Remote changed
Pull to sync
Encrypted File Sharing

Encrypted File Sharing

Share sensitive files like .env files, certificates, and credentials with your team. Files are encrypted with the same zero-trust model.

  • Share any file type securely
  • Automatic encryption/decryption
  • Download history tracking
  • Per-project file storage
Project Files
.env.production
2.4 KB
service-account.json
1.8 KB
ssl-certificate.pem
4.1 KB
All files encrypted with XChaCha20-Poly1305
Organizations & Teams

Organizations & Teams

Structure your secrets with a hierarchical model. Create organizations, organize teams, and manage projects with fine-grained access control.

  • Multi-organization support
  • Flexible team structure
  • Project-level permissions
  • Admin and member roles
Acme Corp
Organization
Backend
Team
API
Auth
Frontend
Team
Web
Mobile
Organization
Teams
Projects
Optional Integration

Google Secret Manager Sync

Already using Google Secret Manager? Connect directly and pull secrets into Envie. Your service account credentials are encrypted locally - we never see them.

  • Direct connection to Google Cloud API
  • Service account key encrypted locally
  • No intermediate server - secrets go directly to your app
  • Seamless workflow with existing infrastructure
Your Device
Decrypts service account key using your Project Key
Decrypted locally
Google Cloud API
Direct connection - no Envie servers involved
Secrets fetched directly
Secrets in Envie
Available in app state, never stored on our servers

Your GCP credentials never touch Envie servers

Compare & Merge

Project Diff & Compare

Compare configurations between any two projects in your organization. See what's changed, what's been added or removed, and selectively apply changes with a visual diff interface.

  • Visual diff with status indicators
  • Per-item actions (Accept, Keep, Delete)
  • Bulk actions for quick merging
  • Swap direction to compare both ways
Compare Projects
Base:api-staging
Target:api-production
DATABASE_URL
changed
NEW_RELIC_KEY
added
DEBUG_MODE
removed
API_VERSION
unchanged
1 changed
1 added
1 removed

And much more...

Project Cloning

Clone projects to new teams with selective config copying. Choose which values to include or leave empty for sensitive secrets.

Team Collaboration

Work together with your team on shared secrets. Each member has their own encryption keys for maximum security.

Key Rotation

Rotate encryption keys when team members leave. For organizations, double-admin approval ensures no single point of failure.

Device Identities

Each device has its own cryptographic identity. Approve new devices or revoke access instantly.

Categories

Organize your environment variables with categories like Development, Staging, and Production.

Zero-Trust Security

Built on zero-trust principles. The server never sees your unencrypted data.

Ready to secure your secrets?

Envie is open source and free to use. Check out the code on GitHub and start securing your team's secrets today.