Zero-knowledge end-to-end encryption. Seamless CLI integration. Granular sharing. Built specifically for modern developer workflows.
Hover over the cards below to uncover the depth of our military-grade infrastructure.
Your secrets are encrypted in your browser. The server never sees your plaintext data.
We use AES-256-GCM for envelope encryption. Your Master Password stays local and derives a Key Encryption Key via PBKDF2. Even in a total database breach, your secrets remain mathematically impenetrable.
Share specific files or environments via email with granular TTLs and permissions.
Create 'PR-style' edit requests. Shared payloads are re-encrypted client-side using a unique invitation salt, meaning a revoked share instantly cryptographically invalidates access.
Create democratic workspaces where changes require peer approval to merge to the official King File.
Every team member receives their own personal fork. When teams grow over 10 members, an automatic election is held to vote for a 3-person Council (The Iron Throne) to govern secret merges.
Interact with your vault directly from your terminal or VS Code.
Generate Machine Tokens to inject secrets into your CI/CD. The VS Code extension offers inline peeking, auto-sync file watching, and Git-like conflict resolution for team collisions.
A context-aware AI assistant that understands your environments.
The AI only reads structural metadata (key names, counts, file types) to answer questions or detect missing keys. Plaintext secret values are NEVER sent to the LLM.
Protect your account with WebAuthn, TOTP 2FA, and Recovery Codes.
Instead of typing your password constantly, use Touch ID or Face ID. If you forget your master password, our generated Recovery Codes act as a cryptographic fallback to derive your keys.
EnVault introduces a radically new way to handle team secrets. In a Private Space, everyone gets their own personal fork of the environment.
Manage secrets where you work. EnVault goes beyond the browser, delivering native tools for your terminal and IDE.
Run vault pull or vault push directly from your terminal. Inject secrets securely into your processes using vault run -- npm run dev without ever writing plaintext to your disk.
Never leave your editor. See inline hovers of your decrypted values, gutter indicators showing sync status, and resolve merge conflicts visually just like Git. Auto-push on save keeps your team perfectly in sync.
Generate scoped Machine Tokens to easily pull production secrets into GitHub Actions, Vercel, or AWS deployment pipelines automatically.
Total control over who sees what, and the ability to travel back in time if something goes wrong.
Share entire environments, specific folders, or single variables. Recipient data is securely re-encrypted on your browser before sending, and you remain in total control.
Mistakes happen. That's why every single change to a secret or a file is versioned and cryptographically preserved. You can roll back an entire folder to its exact state from yesterday.
Join developers keeping their secrets secure, synced, and democratized with EnVault.
Create Free Account