AES-256 Encryption
All secret values are encrypted at rest and in transit. Values are never exposed in logs or build output.
Encrypted variables with per-branch overrides.
Manage environment variables and secrets securely through the dashboard or CLI. Values are encrypted at rest with AES-256, injected at build or runtime, and scoped per environment or branch.
Capabilities
All secret values are encrypted at rest and in transit. Values are never exposed in logs or build output.
Override variables per branch — use different database URLs for production, staging, and preview.
Import from .env files, Doppler, Vault, or paste directly. Export to share across projects.
Every create, update, or delete of an environment variable is recorded with user, timestamp, and diff.
Use Cases
Managing API keys across multiple environments
Rotating database credentials without redeploying
Sharing config between microservices in a team
Start for free. No credit card required. Deploy your first project in under 5 minutes.
Deploy for free