envdotweb — Securely Manage Your Environment Files
Every developer has been there — working across multiple machines, projects, and frameworks, juggling different .env files full of sensitive keys, tokens, and secrets. Some end up in a local folder called 'configs', others sit untracked in old commits or forgotten on a cloud IDE. It's not just messy — it's risky. A misplaced environment file can leak production secrets, API keys, or client credentials within seconds.
That exact pain led to the creation of envdotweb, a modern environment-file vault designed for developers who value simplicity, security, and speed. It’s a web app and VS Code extension that together provide an end-to-end solution for managing .env files privately and efficiently — all powered by Supabase.
🧠 The Core Idea
Instead of storing your environment files manually or syncing them through unencrypted channels, envdotweb gives you a single, encrypted place to store and retrieve them. Each file is uploaded securely to Supabase Storage, parsed automatically, and tied to your account. From your dashboard, you can view projects, inspect variables, and restore files whenever needed — all inside a bright, minimal UI inspired by Apple’s design language.
The beauty is in its simplicity. Upload a file, it’s stored safely. Need it again? Download or sync it back into your workspace. No setup headaches, no complex key management, no third-party integrations required.
💻 How It Works
When you log into envdotweb, you’re greeted with a clean dashboard showing your active projects and environment files. Each upload automatically parses the variables, counts them, and stores them as structured data under your account in Supabase. You can preview the file, rename the project, or re-download it anytime.
Free users can upload and manage up to two projects — ideal for hobby projects or small prototypes. Upgrading to Pro (₹499 one-time) removes all limits, unlocking unlimited projects and advanced features like changelogs, collaboration, and upcoming multi-environment management.
All communication happens securely over HTTPS, and data storage uses Supabase’s Row Level Security (RLS) to ensure that no other user can ever access your files or metadata.
🧩 VS Code Extension Integration
What really makes envdotweb shine is its VS Code extension. It directly integrates your local development workflow with your cloud vault. Once installed, you can sign in using your Supabase-backed account, upload your local .env files, and they’re instantly backed up to envdotweb — encrypted, versioned, and accessible from any machine.
Switching workspaces or teams? No problem. The extension lets you pull your stored .env back into any project folder in a single click. It’s like GitHub for environment files — but secure by default and designed exclusively for developer configuration management.
It even supports deep-link authentication (vscode://envdotweb.auth) so you can log in from your browser and continue seamlessly inside VS Code.
🔒 Security & Technology
Under the hood, envdotweb is built with Next.js (App Router) for server-side rendering and smooth navigation, Supabase Auth for authentication, and Supabase Storage for encrypted file storage. Each file is stored privately with strict Row Level Security, ensuring users can only read and modify their own entries.
All secrets remain encrypted at rest, and authentication sessions are securely managed using Supabase cookies on both the web app and VS Code extension sides. Even your parsed environment variables never leave the secure database context — there’s no analytics tracking, no third-party data sharing, and no telemetry.
On the UI side, the design follows a minimal white-and-amber theme with Apple-inspired focus on clarity and whitespace. The interface is built using shadcn/ui components, offering a crisp, modern feel without unnecessary clutter.
💸 Pricing & Philosophy
The entire platform runs on a simple, transparent pricing model. The Free Plan offers two projects with full functionality — perfect for individual developers or small test setups. The Pro Plan, available for a one-time payment of ₹499, unlocks unlimited projects and lifetime access.
There are no hidden subscriptions, renewals, or limits. Once you upgrade, you own the experience — forever. It’s designed to support the project’s sustainability while keeping developer privacy affordable for everyone.
When compared to larger configuration-management tools or secret vaults, envdotweb offers exceptional value: simple setup, local + cloud integration, and secure storage, all bundled into a lightweight interface.
🚀 Future Enhancements
The roadmap for envdotweb is both practical and ambitious. The next major release will introduce environment grouping — separate .env.dev, .env.prod, and .env.staging files within the same project, each with their own version history and tags.
A collaboration system is already in prototype: users will be able to share project environments with teammates using role-based permissions (read-only, edit, admin), all while maintaining encryption and audit trails.
Upcoming updates also include automated changelogs, where every new upload generates a visible diff — so you can instantly see what changed between file versions. Alongside that, you’ll get a version timeline showing when variables were added, updated, or removed over time.
Longer term, envdotweb will integrate with deployment platforms like Vercel, Netlify, Render, and Supabase itself, allowing you to push environment files directly into CI/CD pipelines with one click.
We’re also exploring a CLI tool and REST API, enabling developers to pull environment files directly into build scripts or local development environments — no manual downloads required. Think npx envdot pull and your keys are safely synced.
Other future experiments include two-factor authentication for file access, activity analytics to show when your last sync occurred, and encrypted backups to cloud providers for enterprise users.
Ultimately, envdotweb’s mission is clear: make environment management invisible. You focus on writing code — it quietly takes care of your configuration, security, and sync behind the scenes.
🧩 The Takeaway
For a one-time cost of ₹499, envdotweb provides lifetime access to a developer-first environment manager that bridges your local editor and the cloud. It’s not trying to be another enterprise secrets vault — it’s built for everyday developers who just want their .env files safe, synced, and available anywhere.
It’s the small, thoughtful tool you didn’t realize you needed until you used it — a perfect example of how minimal, developer-driven software can replace complexity with clarity, one command (and one .env) at a time.