Dev Tools · 2h ago
EnvVault Keeps API Keys Out of .env Files for Local Dev
EnvVault is a new open-source tool that stores API keys and secrets in the OS credential store instead of plaintext .env files. It uses reference URIs like envvault://openai/dev in .env, resolving them at launch via the keychain. The tool aims to reduce accidental exposure of secrets in prompts, logs, or screenshots when using coding agents.
Meridian48 take
A practical, lightweight solution for a real pain point, but it doesn't sandbox the child process—secrets still reach the app.
developer-toolssecurity