Dev tools · alternatives · 2026

24 alternatives to envsec

Secrets in your OS keychain. Never in .env or shell history

Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes.

1. 1
   Shelve▲156

   Effortless & secure secrets management

   2025 · shelve.cloud · its alternatives →

2. 2E2
   EnvKey 2.0 – End-To-End Encrypted Environments (now open source)▲225

   Hey HN, I'm so happy to finally show you all this release after years of hard work. I posted the first version of EnvKey to HN back in 2017 (https://news.ycombinator.com/item?id=15330757), then went through YC in W18 (https://news.ycombinator.com/item?id=16569534). EnvKey is an end-to-end encrypted configuration and secrets manager. It protects your organization's API keys, encryption keys, credentials, and other secrets, and makes it easy to run servers, scripts, tests, and everything else with the latest config. It also helps you avoid duplication in your…

   2022 · v2.envkey.com · its alternatives →

3. 3
   envsecrets▲72

   CLI first management of your environment secrets

   2023 · envsecrets.com · its alternatives →

4. 4ES
   EnvKey – securely manage API keys, credentials, and config▲116

   2017 · envkey.com · its alternatives →

5. 5
   enveil – hide your .env secrets from prAIng eyes▲201

   enject: Hide .env secrets from prAIng eyes: secrets live in local encrypted stores (per project) and are injected directly into apps at runtime, never touching disk as plaintext. - GreatScott/enject

   Feb 2026 · github.com · its alternatives →

6. 6SE
   Send encrypted secrets from the command line▲117

   2019 · fluidkeys.com · its alternatives →

7. 7
   EnvKey▲79

   Protect api keys and credentials. Keep config in sync.

   2017 · its alternatives →

8. 8
   Use encrypted passwords in shell scripts signed with your SSH key▲117

   Lightweight solution for using encrypted passwords in shell scripts - plyint/encpass.sh

   2018 · github.com · its alternatives →

9. 9
   CLI-first management of your environment secrets▲10

   Open-source, end-to-end encrypted management of environment secrets.

   2023 · envsecrets.com · its alternatives →

10. 10
    Lemonade Password Manager▲98

    Simple, secure, with an Env Vault for your .env files

    Feb 2026 · lemonadepass.app · its alternatives →

11. 11
    SeKey: An SSH Agent for OS X, Using Secure Enclave and TouchID, in Rust▲169

    Use Touch ID / Secure Enclave for SSH Authentication! - sekey/sekey

    2017 · github.com · its alternatives →

12. 12KS
    Keypub.sh – OAuth for the terminal using SSH keys▲222

    Hi HN! I built KeyPub.sh to solve the problem of user verification for CLI applications. It's essentially OAuth for the terminal, but using SSH keys that developers and users already have. - No installation needed - works with existing SSH setup - Privacy-focused: users control what email info is shared - Simple email verification process - Free public service - Perfect for CLI app developers who don't want to build user verification Try it with: `$ ssh keypub.sh about` Source code: https://github.com/skariel/keypub

    2024 · keypub.sh · its alternatives →

13. 13
    KeyEnv – CLI-first secrets manager for dev teams (Rust)▲5

    Hi HN, I built KeyEnv because I was tired of the "can you Slack me the Stripe key?" workflow. The problem: My team's secrets lived in a mix of Slack DMs, shared Google Docs, and .env files that definitely weren't in .gitignore at some point. Enterprise tools like Vault required more DevOps time than we had. Doppler was close but felt heavier than we needed. What KeyEnv does: keyenv init # link project keyenv pull # sync secrets to local .env keyenv run -- npm start # inject secrets, run command That's basically it. Secrets are encrypted client-side (AES-256-GCM) before leaving your machine.…

    Jan 2026 · keyenv.dev · its alternatives →

14. 14
    SecretEnv – Run any process with secrets from all your backends▲5

    Hi Guys, I built SecretEnv to help solve one common thing that I have seen at every org, that I have worked at. We always had more than one password/credential manager. Service tokens maybe in Vault, AWS SSM etc and some team specific service account or temp account credentials being store in another password store such as 1Password or Keeper, there was never one single credential store. This is where SecretEnv comes in play, it runs any command with secrets injected as env vars, sourced from whatever combination of backend your team already uses. I am sure there are other tools as well…

    May 2026 · github.com · its alternatives →

15. 15
    Enc – A modern and friendly CLI alternative to GnuPG▲90

    Enc is a CLI tool for encryption, a modern and friendly alternative to GnuPG. It is easy to use, secure by default and can encrypt and decrypt files using password or encryption keys, manage and download keys, and sign data. Our goal was to make encryption available to all engineers without the need to learn a lot of new words, concepts, and commands. It is the most beginner-friendly CLI tool for encryption, and keeping it that way is our top priority.

    2023 · github.com · its alternatives →

16. 16
    AxKeyStore▲31

    Hi HN, I built AxKeyStore, an open-source CLI tool for managing secrets that uses your own private GitHub repository as encrypted storage. The idea is simple: → All encryption happens locally. → Secrets are stored as encrypted blobs in your private repo. → GitHub is treated as untrusted storage. → No plaintext secrets ever leave your machine. → No plaintext secrets are stored on disk. Most secret managers either require a hosted backend, a self-hosted server, or trusting a SaaS provider. I wanted something that: → Requires zero infrastructure → Uses tooling developers already have → Keeps…

    Feb 2026 · github.com · its alternatives →

17. 17
    Hold My Env▲99

    Never lose track of your .env files again

    2024 · holdmyenv.com · its alternatives →

18. 18
    PassStore▲4

    Save API keys, .env and secrets locally. Free & Open Source.

    Apr 2026 · passstore.makio.app · its alternatives →

19. 19
    Lockenv – Simple encrypted secrets storage for Git▲105

    Hi! I got tired of setting up tools I can't explain to a team in a few words like sops or git-crypt, just to store few files with environment variables or secrets, so I built lockenv as a simple alternative. It's basically a password-protected vault file you commit to git. No gpg keys, no cloud, just lockenv init, set a password, and lock/unlock the secrets. This tool integrates with OS keyring, so you're not typing passwords constantly. Should work on Mac/Linux/Windows, but I tested it only on linux so far. I am not trying to replace any mature / robust solution, just…

    Dec 2025 · github.com · its alternatives →

20. 20
    1Password CLI 2.0▲90

    Manage secrets in your terminal with biometric unlock.

    2022 · 1password.dev · its alternatives →

21. 21
    CLI tool that allows you to encrypt and decrypt your env variables▲9

    Environment Variables Encryption Tool. Contribute to ulisesojeda/sealenv development by creating an account on GitHub.

    2024 · github.com · its alternatives →

22. 22
    Shello▲104

    Wrangle environment variables

    2023 · shello.app · its alternatives →

23. 23
    JustEnv▲8

    Your environment variables, finally in one safe place

    Jun 2026 · justenvs.app · its alternatives →

24. 24CS
    Crypt – Secure Configuration Storage in Etcd or Consul▲69

    Crypt : Store and retrieve encrypted configuration parameters from etcd or consul

    2014 · xordataexchange.github.io · its alternatives →

Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →