v1.0.0 - Initial Release

envsecrets v1.0.0 - Initial Release

A lightweight CLI tool for securely managing environment variables and secrets with encryption.

Features

Core Commands:

• init - Initialize encrypted vaults for different environments
• add - Add or update secrets with AES-256-GCM encryption
• get - Retrieve individual secrets
• delete - Remove secrets from vaults
• export - Export all secrets to dotenv or JSON format
• import - Import secrets from dotenv or JSON files
• rotate - Change vault passphrase with automatic re-encryption
• clear - Clear cached passphrases from system keyring
• destroy - Permanently delete vaults

Security Features:

• AES-256-GCM authenticated encryption
• Argon2id key derivation (memory-hard, GPU-resistant)
• System keyring integration for passphrase caching
• Secure file permissions (0o600)

Key Benefits:

• Version control your encrypted secrets safely
• Track secret changes through git history
• Collaborate securely with your team
• No separate secret management infrastructure needed

Installation

go install github.com/suvaidkhan/envsecrets@v1.0.0

Quick Start

# Initialize a vault
envsecrets init --env production

# Add secrets
envsecrets add --env production --key API_KEY --value "your-secret"

# Export to .env file
envsecrets export --env production > .env