Protect API keys and credentials.
Keep configuration in sync everywhere.

Smart configuration and secrets management that doesn't trust servers.
Prevent insecure sharing and config sprawl.
Integrate in minutes.

EnvKey is desktop-only.
Check back on desktop to download.
Zillow Lambda School DNSimple Sky News The Daily Beast Give Lively

1. Manage configuration and access levels for all your apps, environments, and teams in one place.

Available for Mac, Windows, and Linux.

2. Configure any development or server environment with just a single environment variable.

Plug a security hole while making life easier.

Don't risk sharing sensitive config over email, Slack, or Google Docs in plain text. Grant access quickly without giving third parties (including EnvKey) unnecessary access. Restrict production secrets to those who really need them, remove access with one click when it's no longer needed, and make it easy to rotate secrets. EnvKey makes strong security the path of least resistance.

Stay effortlessly in sync across teams, servers, and environments.

Manage all your configuration in one place. Stay updated in real-time, and keep both development machines and servers securely, automatically in sync. Simplify developer onboarding, simplify ops, and say goodbye to missing key errors in development, production, CI, and everywhere else.

Developers, managers, and sys admins love EnvKey.

EnvKey has been such a lifesaver for our team at Soundstripe. Onboarding new developers was instantly streamlined as far as environment setups are concerned, and configuring servers has been simplified dramatically. We're hooked!

Trevor Hinesley - CTO, Soundstripe

Our environment variables had been a serious headache to deal with before, but with EnvKey it's suddenly super easy to add new variables or update the values of old ones. I love that it keeps them in sync across all of our production and test servers without any effort on our part. Setting up a new machine to use it is refreshingly simple. Honestly, thank you guys for providing a great solution!

Lance Petersen - Engineer, Skip

First of all, I would like to say “THANK YOU”. EnvKey has solved a major problem for us, in managing our secrets really well.

We rolled it out across our dev, staging and production environments yesterday, and it was a smooth, 15 minute process.

We host everything on AWS, and I spent a week studying their key management solution. EnvKey made it ridiculously easy.

Devan Sabaratnam - Founder, HRPartner

This is a badass piece of software... I'm an independent contractor and this is already saving me time managing secrets on my side projects even when it's just me! I can only imagine how useful this is going to be in a team setting.

Thanks for making this!

Jarrod Spillers - Engineer, Stacktact

An open standard.

EnvKey's end-to-end encryption is built on OpenPGP, a secure and battle-tested standard. We never see your secrets in plain text, and your encryption passphrase is never sent to our servers. A web of trust verifies the authenticity of public keys on all encryption and decryption operations. The EnvKey App and all its client libraries are open source under the MIT License. 

Apart from providing client-side encryption for your secrets, EnvKey also follows strict best practices for server, network, and data security. All data is encrypted in transit and at rest, and all connections are made over TLS. Our databases, caches, and application servers are contained within a private, hardened network. 

Highly available, multi-region, redundant.

EnvKey runs on a highly secure, highly available cloud architecture. Your encrypted config is delivered by a dedicated micro-service that makes a single indexed query and responds in milliseconds. In addition to multi-availability zone failover, multi-region failover is also offered through automatic encrypted backups to Amazon S3. 

Make config one part of your system that just works.

EnvKey is desktop-only.
Check back on desktop to download.

Self-hosting and enterprise

Want to self-host EnvKey? Need version control, audit logs, and SSO? Need to scale to thousands of developers and servers?

V2 is coming soon. Find out when it launches: