Quick Start • Configuration • Commands • Keybindings • FAQ • Documentation

A secure encrypted vault for managing API keys, secrets, and environment variables. Built for developers who live in the terminal.

What is Envy?

I built Envy because I was tired of juggling .env files and keeping secrets scattered across password managers, sticky notes, and Slack threads. It's a single binary that gives you both a slick TUI for browsing secrets and a CLI for automation.

Here's what you get:

• Real encryption — AES-256-GCM with Argon2id, not just base64 obfuscation
• Fast access — Fuzzy search finds secrets in milliseconds
• Organized by project — Group related secrets together
• Multiple environments — Keep dev, stage, and prod separate
• Version history — See what changed and when
• Import/export — Bring in your existing .env files

Quick Install

One command:

curl -fsSL https://raw.githubusercontent.com/XENONCYBER/envy/main/install.sh | sh

Or build from source:

git clone https://github.com/XENONCYBER/envy.git && cd envy
go build -o envy ./cmd/main.go

Quick Start

# Create your vault (first run only)
envy

# Import existing .env files
envy --import .env

# Set secrets via CLI
envy set myproject API_KEY=secret123

# Run commands with secrets injected
envy run myproject -- npm start

# Export project to .env file
envy --export myproject

Security

Your secrets are encrypted with AES-256-GCM. The key is derived from your master password using Argon2id — a memory-hard function designed to resist GPU cracking attempts.

• Your password is never stored anywhere
• We only keep a hash to verify it's correct
• The vault file is useless without your password
• If you forget your password, your secrets are gone. Period.

Read more about how the encryption works.

Documentation

The full docs live in the docs/ folder:

• Getting Started — Installation, your first vault, basic concepts
• Usage Guide — TUI navigation, CLI commands, workflows
• Configuration — Lua configuration, themes, keybindings
• Security — Encryption details, best practices
• Reference — Command reference
• Troubleshooting — Common issues, FAQ
• Examples — Real-world workflows

Development

# Prerequisites: Go 1.25.4+

# Clone and build
git clone https://github.com/XENONCYBER/envy.git
cd envy
go build -o envy ./cmd/main.go

# Run tests
go test ./...

# Run locally
go run ./cmd/main.go

See Development Guide for contribution guidelines.

License

MIT License — see LICENSE for details.

Similar Projects

• pass — The standard Unix password manager
• gopass — A more feature-rich pass implementation
• vault — HashiCorp's enterprise secrets solution

---

GitHub · Issues · Releases