Dev tools · alternatives · 2026
24 alternatives to envsecrets
CLI first management of your environment secrets
Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes. envsecrets launched in 2023; newer entries below may have overtaken it.
- 1
Open-source, end-to-end encrypted management of environment secrets.
2023 · envsecrets.com · its alternatives →
- 2
CLI-first management of your environment secrets.
2023 · envsecrets.com · its alternatives →
- 3
enject: Hide .env secrets from prAIng eyes: secrets live in local encrypted stores (per project) and are injected directly into apps at runtime, never touching disk as plaintext. - GreatScott/enject
Feb 2026 · github.com · its alternatives →
- 4ES
2017 · envkey.com · its alternatives →
- 5E2
Hey HN, I'm so happy to finally show you all this release after years of hard work. I posted the first version of EnvKey to HN back in 2017 (https://news.ycombinator.com/item?id=15330757), then went through YC in W18 (https://news.ycombinator.com/item?id=16569534). EnvKey is an end-to-end encrypted configuration and secrets manager. It protects your organization's API keys, encryption keys, credentials, and other secrets, and makes it easy to run servers, scripts, tests, and everything else with the latest config. It also helps you avoid duplication in your…
2022 · v2.envkey.com · its alternatives →
- 6
- 7
Manage secrets in your terminal with biometric unlock.
2022 · 1password.dev · its alternatives →
- 8
Pulumi ESC▲113Centralize environments, secrets, and configuration
2023 · pulumi.com · its alternatives →
- 9
- 10
Piiano Vault▲176The first secure cloud native storage for PII,PHI, PCI & KYC
2023 · its alternatives →
- 11
- 12
We built OneCLI because AI agents are being given raw API keys. And it's going about as well as you'd expect. We figured the answer isn't "don't give agents access," it's "give them access without giving them secrets." OneCLI is an open-source gateway that sits between your AI agents and the services they call. You store your real credentials once in OneCLI's encrypted vault, and give your agents placeholder keys. When an agent makes an HTTP call through the proxy, OneCLI matches the request by host/path, verifies the agent should have access, swaps the placeholder for the real…
Mar 2026 · github.com · its alternatives →
- 13
Develop faster, eliminate complexity, protect your secrets
2022 · 1password.com · its alternatives →
- 14
Infisical is the open-source platform for secrets, certificates, and privileged access management. - infisical/README.md at main · Infisical/infisical
2024 · github.com · its alternatives →
- 15
Contribute to fmeringdal/covert development by creating an account on GitHub.
2023 · github.com · its alternatives →
- 16
Hi HN, I built KeyEnv because I was tired of the "can you Slack me the Stripe key?" workflow. The problem: My team's secrets lived in a mix of Slack DMs, shared Google Docs, and .env files that definitely weren't in .gitignore at some point. Enterprise tools like Vault required more DevOps time than we had. Doppler was close but felt heavier than we needed. What KeyEnv does: keyenv init # link project keyenv pull # sync secrets to local .env keyenv run -- npm start # inject secrets, run command That's basically it. Secrets are encrypted client-side (AES-256-GCM) before leaving your machine.…
Jan 2026 · keyenv.dev · its alternatives →
- 17
- 18
Enc is a CLI tool for encryption, a modern and friendly alternative to GnuPG. It is easy to use, secure by default and can encrypt and decrypt files using password or encryption keys, manage and download keys, and sign data. Our goal was to make encryption available to all engineers without the need to learn a lot of new words, concepts, and commands. It is the most beginner-friendly CLI tool for encryption, and keeping it that way is our top priority.
2023 · github.com · its alternatives →
- 19
We built the Kontext CLI because AI coding agents need access to GitHub, Stripe, databases, and dozens of other services — and right now most teams handle this by copy-pasting long-lived API keys into .env files, or the actual chat interface, whilst hoping for the best. The problem isn't just secret sprawl. It's that there's no lineage of access. You don't know which developer launched which agent, what it accessed, or whether it should have been allowed to. The moment you hand raw credentials to a process, you've lost the ability to enforce policy, audit access, or rotate without pain. The…
Apr 2026 · github.com · its alternatives →
- 20
Build security into your apps and workflows
2023 · hashicorp.com · its alternatives →
- 21
A secure HashiCorp Vault for secrets, tokens, keys, passwords, and more. Automated deployment with Terraform on AWS. Configurable options for security and scalability. Usable with any applications and services hosted anywhere. - jcolemorrison/vault-on-aws
2020 · github.com · its alternatives →
- 22
Secrets.mjs▲10Manage your team's local dev env secrets with gcloud storage
2022 · github.com · its alternatives →
- 23LH
I got tired of: - .env files committed to Git (seen it happen 100+ times) - API keys shared in Slack - Wondering who has access to what secrets So I built Liberty - a CLI tool that replaces .env files with hardware-bound encryption. How it works: $ pip install liberty-secrets $ liberty add DATABASE_URL postgresql://... $ liberty add STRIPE_KEY sk-... $ liberty exec npm start Secrets are encrypted with a key derived from your machine's hardware (CPU ID + machine ID + disk serial). If someone steals your .liberty vault file, it's useless on their machine. Features: - Hardware-bound…
Jan 2026 · its alternatives →
- 24
Vaultlet▲1Keep your secrets secret — straight from the terminal
May 2026 · vaultlethq.com · its alternatives →
Also compare
- CLI-first management of your environment secrets alternatives
- envsecrets alternatives
- enveil – hide your .env secrets from prAIng eyes alternatives
- EnvKey – securely manage API keys, credentials, and config alternatives
- EnvKey 2.0 – End-To-End Encrypted Environments (now open source) alternatives
- EnvKey alternatives
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →