Stop committing secrets to Git. Start syncing them securely.
Envval is a production-grade VS Code extension that automatically synchronizes your .env files across devices with military-grade encryption. Your secrets stay encrypted — we can't read them, and neither can anyone else.
✨ Features
End-to-End Encryption: AES-256-GCM encryption ensures your secrets never touch our servers in plaintext. Keys never leave your machine.
Automatic Sync: Real-time sync across all your devices with offline support and conflict detection.
Smart Repository Detection: Works out of the box with monorepos (Nx, Turborepo, Lerna, pnpm workspaces) and complex Git setups.
Developer Experience: Inline hover tooltips for variables (with smart masking), status bar integration, and zero config required.
Multiple .env Files: Full support for all variants like .env.local, .env.production, etc., visible in a dedicated workspace tree view.
🚀 Quick Start
Install "Envval" from the Extensions sidebar.
Open the Envval sidebar and click Sign In to Start Syncing.
Open a project with a .env file — click Initialize to encrypt and upload.
Sign in on your other devices to see your .env files appear automatically!
🎛️ Configuration
Envval works great with zero configuration, but you can customize features like auto-detection and hover behaviors via Settings → Extensions → Envval.
📋 Commands
Access useful commands via the Command Palette (Ctrl+Shift+P / Cmd+Shift+P), such as:
EnvVal: Show Quick Sync Action
EnvVal: Force Sync
EnvVal: Logout
🔐 Security & Privacy
Your security is our priority. Envval uses end-to-end client-side encryption, meaning we have zero knowledge of your secrets. We collect no telemetry. For full technical details, see our Privacy & Security Statement.
Made with ❤️ for developers who care about security
