envlockr 1.0.1

Secure your environment variables — locally, encrypted, and stream-safe.

🔐 EnvLockr CLI

Secure your environment variables — locally, encrypted, and stream-safe.

EnvLockr CLI is a tool for developers, streamers, and indie hackers who want full control of their secrets without relying on cloud services.

✨ Features

• Local-first: All secrets stored securely on your machine
• AES Encryption: Protects your secrets even if your disk is compromised
• Offline Mode: No internet needed to operate
• Stream-Safe: No .env file leaks on screen while coding or streaming
• Simple CLI: Add, copy, list, and retrieve secrets instantly
• Cross-Project Friendly: Works with React, Node.js, Python, and more
• GitHub Action: Automatically scan commits for exposed secrets (Learn more)

🚀 Quick Start

1. Install

# Install from PyPI (recommended)
pip install envlockr

# With clipboard support
pip install envlockr[clipboard]

Alternative: Install from source

git clone https://github.com/RohanRatwani/envlockr-cli.git
cd envlockr-cli
pip install -e .

2. Commands

Command	Example	What it Does
add	envlockr add STRIPE_KEY	Add a new secret
get	envlockr get STRIPE_KEY	Retrieve a secret
list	envlockr list	List all stored secrets
copy	envlockr copy STRIPE_KEY	Copy secret to clipboard
update	envlockr update STRIPE_KEY	Update an existing secret
delete	envlockr delete STRIPE_KEY	Delete a secret
export	envlockr export --output .env	Export all secrets to .env file
import	envlockr import .env	Import secrets from .env file
--version	envlockr --version	Show version number

⚡ How to Use in Your Projects

🖥 Node.js / React / Vite / Next.js

Option 1: Export to .env file

envlockr export --output .env
npm run dev

Option 2: Inline Injection (no .env needed)

export STRIPE_KEY=$(envlockr get STRIPE_KEY)
npm run dev

Option 3: Import existing .env file

# Migrate your existing .env to encrypted storage
envlockr import .env
rm .env  # Delete the unencrypted file

🛠 Compatible with

• create-react-app
• Next.js
• Vite
• Remix
• Express
• NestJS
• and more!

👉 See framework-specific examples - React, Next.js, Python, Docker, and more!

📦 Local Storage

All your secrets are encrypted and stored in:

~/.envlockr/vault.json
~/.envlockr/key.key

• ✅ AES-256 level security
• ✅ No external cloud or server dependency

🔍 GitHub Action - Prevent Secret Leaks

EnvLockr includes a GitHub Action that automatically scans your repository for exposed secrets!

Quick Setup

Add this to .github/workflows/envlockr-scan.yml:

name: EnvLockr Secret Scan
on: [pull_request, push]

jobs:
  scan:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - name: Scan for secrets
        run: |
          curl -sSL https://raw.githubusercontent.com/RohanRatwani/envlockr-cli/main/.github/scripts/scan-secrets.sh | bash

What it does:

• ✅ Scans commits for API keys, tokens, and passwords
• ✅ Blocks PRs if secrets are detected
• ✅ Posts helpful comments with fix instructions
• ✅ Detects AWS, Stripe, GitHub, Google, OpenAI, and more

👉 Full GitHub Action Documentation

💬 Why EnvLockr?

• 🔒 Protect your keys without trusting the cloud
• 🎥 Stream coding sessions without leaking environment secrets
• ⚡ Speed up local development with simple, fast secret management

📚 Documentation

• Quick Reference Guide - Common commands and workflows
• Framework Examples - React, Next.js, Python, Node.js, Docker
• GitHub Action Setup - Prevent secret leaks in CI/CD
• Contributing Guide - Help improve EnvLockr
• Changelog - Version history

📥 What's Next?

We're exploring new features for EnvLockr, including:

• Advanced environment injection
• Project-specific vaults
• Desktop UI app
• IDE integrations (VS Code, JetBrains)
• Team collaboration features

👉 Join the Waitlist and share your thoughts!

💡 We Want Your Feedback!

Which features would you love to see in EnvLockr?

• 💬 GitHub Discussions
• 🐛 Report Issues
• 🌟 Star us on GitHub

🛡️ License

This project is licensed under the MIT License.

---

Made with ❤️ by Rohan Ratwani
Website · GitHub · Twitter