Skip to main content

Secure your environment variables — locally, encrypted, and stream-safe.

Project description

EnvLockr - Secure Your Environment Variables Locally

🔐 EnvLockr CLI

PyPI version License: MIT Python 3.7+ GitHub stars

Secure your environment variables — locally, encrypted, and stream-safe.

EnvLockr CLI is a tool for developers, streamers, and indie hackers who want full control of their secrets without relying on cloud services.

✨ Features

  • Local-first: All secrets stored securely on your machine
  • AES Encryption: Protects your secrets even if your disk is compromised
  • Offline Mode: No internet needed to operate
  • Stream-Safe: No .env file leaks on screen while coding or streaming
  • Simple CLI: Add, copy, list, and retrieve secrets instantly
  • Cross-Project Friendly: Works with React, Node.js, Python, and more
  • GitHub Action: Automatically scan commits for exposed secrets (Learn more)

🚀 Quick Start

1. Install

# Install from PyPI (recommended)
pip install envlockr

# With clipboard support
pip install envlockr[clipboard]
Alternative: Install from source
git clone https://github.com/RohanRatwani/envlockr-cli.git
cd envlockr-cli
pip install -e .

2. Commands

Command Example What it Does
add envlockr add STRIPE_KEY Add a new secret
get envlockr get STRIPE_KEY Retrieve a secret
list envlockr list List all stored secrets
copy envlockr copy STRIPE_KEY Copy secret to clipboard
update envlockr update STRIPE_KEY Update an existing secret
delete envlockr delete STRIPE_KEY Delete a secret
export envlockr export --output .env Export all secrets to .env file
import envlockr import .env Import secrets from .env file
--version envlockr --version Show version number

⚡ How to Use in Your Projects

🖥 Node.js / React / Vite / Next.js

Option 1: Export to .env file

envlockr export --output .env
npm run dev

Option 2: Inline Injection (no .env needed)

export STRIPE_KEY=$(envlockr get STRIPE_KEY)
npm run dev

Option 3: Import existing .env file

# Migrate your existing .env to encrypted storage
envlockr import .env
rm .env  # Delete the unencrypted file

🛠 Compatible with

  • create-react-app
  • Next.js
  • Vite
  • Remix
  • Express
  • NestJS
  • and more!

👉 See framework-specific examples - React, Next.js, Python, Docker, and more!

📦 Local Storage

All your secrets are encrypted and stored in:

~/.envlockr/vault.json
~/.envlockr/key.key
  • ✅ AES-256 level security
  • ✅ No external cloud or server dependency

� GitHub Action - Prevent Secret Leaks

EnvLockr includes a GitHub Action that automatically scans your repository for exposed secrets!

Quick Setup

Add this to .github/workflows/envlockr-scan.yml:

name: EnvLockr Secret Scan
on: [pull_request, push]

jobs:
  scan:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - name: Scan for secrets
        run: |
          curl -sSL https://raw.githubusercontent.com/RohanRatwani/envlockr-cli/main/.github/scripts/scan-secrets.sh | bash

What it does:

  • ✅ Scans commits for API keys, tokens, and passwords
  • ✅ Blocks PRs if secrets are detected
  • ✅ Posts helpful comments with fix instructions
  • ✅ Detects AWS, Stripe, GitHub, Google, OpenAI, and more

👉 Full GitHub Action Documentation

Why EnvLockr?

  • 🔒 Protect your keys without trusting the cloud
  • 🎥 Stream coding sessions without leaking environment secrets
  • Speed up local development with simple, fast secret management

📚 Documentation

☕ Support the Project

If EnvLockr helps you, consider supporting its development:

Buy Me A Coffee

Or become a GitHub Sponsor

📥 What's Next?

We're exploring new features for EnvLockr, including:

  • Advanced environment injection
  • Project-specific vaults
  • Desktop UI app
  • IDE integrations (VS Code, JetBrains)
  • Team collaboration features

👉 Join the Waitlist and share your thoughts!

💡 We Want Your Feedback!

Which features would you love to see in EnvLockr?

📚 Documentation

🛡 License

This project is licensed under the MIT License.


Made with ❤️ by Rohan Ratwani
Website · GitHub · Twitter

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

envlockr-1.0.0.tar.gz (9.9 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

envlockr-1.0.0-py3-none-any.whl (9.8 kB view details)

Uploaded Python 3

File details

Details for the file envlockr-1.0.0.tar.gz.

File metadata

  • Download URL: envlockr-1.0.0.tar.gz
  • Upload date:
  • Size: 9.9 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? No
  • Uploaded via: twine/6.2.0 CPython/3.13.2

File hashes

Hashes for envlockr-1.0.0.tar.gz
Algorithm Hash digest
SHA256 ae661ddcf136f706cfe90e5281ae9dd93dee7e3a3872a04b38989792c2fef25a
MD5 385fc48d09b97ea875dbd786fba04723
BLAKE2b-256 5edd705877b9498288ab2982cf6b57352486851143c6c5209bdf74df8771c908

See more details on using hashes here.

File details

Details for the file envlockr-1.0.0-py3-none-any.whl.

File metadata

  • Download URL: envlockr-1.0.0-py3-none-any.whl
  • Upload date:
  • Size: 9.8 kB
  • Tags: Python 3
  • Uploaded using Trusted Publishing? No
  • Uploaded via: twine/6.2.0 CPython/3.13.2

File hashes

Hashes for envlockr-1.0.0-py3-none-any.whl
Algorithm Hash digest
SHA256 dd28cf56aee3608132ecce353c61cc82418d5e420c4fefc97117e7eafee5391f
MD5 1adf5f115653b3788f969325694ec0bc
BLAKE2b-256 e171a815f1d17bbda661b8cfeca8ff72d8a4b66abf7ebf69cba978d0960b8f5c

See more details on using hashes here.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page