enveil – hide your .env secrets from prAIng eyes
enject: Hide .env secrets from prAIng eyes: secrets live in local encrypted stores (per project) and are injected directly into apps at runtime, never touching disk as plaintext. - GreatScott/enject
enveil – hide your .env secrets from prAIng eyes launched on February 24, 2026 with 201 votes, #145 of 16,628 launches that month and more than 99% of that year's launches.
In plain words
Enveil is a tool designed to protect environment variable files from being exposed in AI model contexts. It helps developers safeguard sensitive configuration data like API keys and credentials by preventing .env files from being read by language models during development or debugging sessions. The tool targets software developers who use AI assistants while working with projects containing secret information, addressing the security risk of accidental credential leakage through AI interactions.
written from the facts on this page · September 2026
From the sources
AI coding tools like Claude Code, Copilot, Cursor, and others can read files in your project directory, which means a plaintext .env file is an accidental secret dump waiting to happen. This isn’t theoretical. It is a known issue that has happened to me several times (even after explicitly telling Claude not to peek in Claude Code’s settings.json file). enject solves this by ensuring plaintext secrets never exist on disk at all . Your .env file contains only symbolic references; the real values live in an encrypted local store and are injected directly into your subprocess at launch. This project is inspired by Filip Hric’s solution/ blog post , which uses a similar concept leveraging…from github.com
Does a similar job
all alternatives →- E2EnvKey 2.0 – End-To-End Encrypted Environments (now open source)2022 · v2.envkey.com · ▲225
Hey HN, I'm so happy to finally show you all this release after years of hard work. I posted the first version of EnvKey to HN back in 2017 (https://news.ycombinator.com/item?id=15330757), then went through YC in W18 (https://news.ycombinator.com/item?id=16569534). EnvKey is an end-to-end encrypted configuration and secrets manager. It protects your organization's API keys, encryption keys, credentials, and other secrets, and makes it easy to run servers, scripts, tests, and everything else with the latest config. It also helps you avoid duplication in your…
- ESEnvKey – securely manage API keys, credentials, and config2017 · envkey.com · ▲116
Dotenv Mask Editor: No more embarrassing screen leaks of your .envJan 2026 · marketplace.visualstudio.com · ▲28Hi HN, I built this because I often work in coworking spaces or do screen sharing, and I've always had this fear of accidentally flashing my .env file with production secrets to the whole room (or recording). It’s a simple VS Code extension that opens .env files in a custom grid editor. It automatically masks any value longer than 6 characters so I can safely open the file to check keys without exposing the actual secrets. It runs 100% locally with zero dependencies (I know how sensitive these files are). It just reads the file, renders the grid, and saves it back as standard text. It's open…
better-envNov 2025 · better-env.dev · ▲9.env files have always felt archaic, insecure, clunky and honestly just not fun to work with. I see my friends (and myself) accidentally committing them all the time. Managing secrets across projects becomes a mess of copy-pasting keys into scattered env files with no real way to sync anything. So I built better-env: a secure, developer-friendly alternative to .env. Store your secrets once in a global encrypted store, and load them per-project at runtime. I’d love feedback on whether this feels useful beyond solo devs, and what you’d want for teams or CI setups. Fully open source:…
More work this month
the category →
Endless lofi beats composed live in your browser, over pixel-art nights in Paris, Tokyo, New York, Hong Kong, Sydney, San Francisco and more. Free, no sign-up.
Work · 24d ago · loficities.com
Smooth Recorder▲257Mac screen recordings that look edited when you hit stop
Work · 18d ago · smoothrecorder.com
Work · 12d ago · readrare.com
Source: Show HN post ↗
Launched alongside, February 2026
the whole month →
Lovon AI Therapy▲801Feel closer and have more fun with your partner every day!
AI · Feb 2026 · lovon.app
Hello my name is Ben Ward for the past 3 years I have been remastering the financial game Wall Street Raider created by Michael Jenkins originally on DOS in 1986. It has been a rough journey but I finally see the light at the end of the tunnel. I just recently redid the website and thought maybe the full story of how this project came to be would interest you all. Thank you for reading.
Work · Feb 2026 · wallstreetraider.com