Encrypted vaults for environment variables and .env files — share secrets with your team, keep them on disk or on a server over SSH, and deploy .env files from a fast terminal UI.
Envite is a terminal application that keeps the environment variables of your projects in a single encrypted .envite file. Every team member opens it with their own password, the file can live on your disk, in a synced folder or on a server over SSH, and concurrent edits merge on save. When an environment is ready, envite shows a key-by-key diff and writes its .env file to the target, locally or over SSH.
curl -fsSL https://raw.githubusercontent.com/Kevinsillo/envite/main/install.sh | bash- A single static binary for Linux x86_64, no runtime dependencies, installed to
~/.local/binafter checking its SHA-256;envite --versionprints the installed version. - The system
sshclient is used for remote vaults and deploys. envite updateinstalls the latest release after checking its SHA-256 (it needscurl). Once a day at startup envite also looks for a new version and offers it; turn that off in Options.
Version, install directory, manual download and updating → Installation
| Term | Meaning |
|---|---|
| Vault | One encrypted file with all your projects and their members. |
| Project | An application, with its own details (author, license, description…). |
| Environment | A deployment of a project (production, staging…), with its own .env target. |
| Section | A titled group of variables inside an environment, with an optional comment. |
| Variable | A KEY=value pair with a comment, secret masking and an enabled / disabled / commented state. |
| History | Every change is recorded with who made it, when and which fields changed: browse it for the whole vault or a project, filtered by member, item type or action, or below each variable. Secret values are never shown. |
| Deploy | Render the .env file of an environment, preview the diff and write it atomically, with a backup. |
- Run
enviteand pressnto create a vault: a name, a location and your first member with a password. - Press
non Projects, then go down withEnterto create an environment, its sections and variables. - On Environments, press
pto preview the deploy of the.envfile, thenEnterand confirm to write it. - Add teammates from Users (
u); they add the vault file withoon the home screen.
Walkthrough → First start
| Key | Action |
|---|---|
Ctrl-G |
Show the keys of the current screen |
n / e / d |
New, edit, delete |
/ |
Filter the list |
v / Ctrl-V |
Reveal or hide a secret value |
p / i |
Deploy / import a .env file (environments) |
c |
Resolve conflicts with changes saved elsewhere |
Ctrl-L |
Lock the vault |
Ctrl-C |
Save, close and quit |
Full list → Keyboard shortcuts
This repository hosts the documentation site (Astro Starlight, deployed to GitHub Pages), the installer (install.sh) and the binary releases. The source code of envite is kept in a private repository.
pnpm install
pnpm devFreeware: the envite binaries are free to download and use, for personal and commercial purposes; the source code is not public. The binaries and the texts of this repository are covered by the envite license. Each release lists the licenses of the third-party components it includes in THIRD-PARTY-LICENSES.md.
