.env Vault
Store .env files and secret collections encrypted with AES-256-GCM, stored locally by default, and export them only when you choose to.
What the .env Vault does
Open .env Vault from the sidebar ("Encrypted .env management"). It stores your .env files and secret collections encrypted at rest: "Your secrets are encrypted with AES-256-GCM and stored locally by default. They only leave your machine when you include them in an encrypted backup."
Import or create a collection
Add secrets with Import .env File(s) or Create Collection. The import dialog notes "This file will be encrypted and stored securely. The original file on disk is not modified," and asks for a Collection Name, an optional Description, and Tags. Finish with Encrypt & Save.
View, copy, and export
Each collection row shows its name, secret count, tags, an Encrypted at rest badge, and when it was updated. Expand a collection to toggle Show Values / Hide Values and Copy as .env (values stay masked until you reveal them). Export as .env warns that "The exported file will contain unencrypted secrets. Store it securely" before you confirm.
Ready to try Server Compass?
Download the app and deploy your first application in under 5 minutes.
Download Server Compass