Envi keeps environment variables encrypted, versioned and scoped to the people who need them, from a laptop to production.
Secrets
Every environment, one project.
Development, staging and production live side by side, each with its own values. Values stay masked until someone reveals them, and every save bumps a revision so nobody overwrites a teammate's change without knowing.
- Import an existing .env in one drop
- Masked by default, revealed per key
- A new revision on every change
Project
northwind-api
EnvironmentProduction
production
Filter keys
rev 42
KeyValue
DATABASE_URL••••••••••••REDIS_URLredis://cache.internal:6379/0RESEND_API_KEY••••••••••••SESSION_SECRET••••••••••••STRIPE_SECRET_KEY••••••••••••STRIPE_WEBHOOK_SECRET••••••••••••Access
Share a project, not the whole workspace.
Invite people by email and give each one read, write or manage. Production needs its own grant, so access to a project never quietly includes the environment that matters most.
- Read, write and manage roles
- Production is granted separately
- Invitations expire on their own
Collaborators
CollaboratorAccess
amara@northwind.devmanageActive
diego@northwind.devwriteActive
priya@northwind.devreadActive
contractor@studio.ioreadPending
Audit
Know who touched what, and when.
Every write and delete is recorded against the person or token that made it. Reads are logged once per environment, so a deploy that runs all day still leaves a feed you can read.
- People and service tokens side by side
- Scoped to the exact environment
- Kept for every project
Activity
Updated secretsdiego@northwind.dev · production
2m agoRead secretsService token · deploy · production
14m agoDeleted a secretamara@northwind.dev · staging
1h agoRead secretspriya@northwind.dev · development
3h agoAES-256-GCMEvery value is sealed before it reaches the database, including its history.
No passwordsSign in with an email code or approve a device. There is nothing to leak.
Service tokensScoped credentials for CI and deploys, separate from any person's session.
Open sourceUse Envi Cloud, or run the whole stack on your own servers.