Local-first AES-256-GCM encryption
Keep secrets on your machine with a zero-trust passphrase workflow.
EnvDeskLocal env workspace
press d for themeDownload
Built for local-first secret handling
EnvDesk
A local-first .env manager for developers. Scan projects, encrypt local workspaces, mask sensitive values, and make env changes with fewer surprises.
Local-first
Encrypted
Open releases
envdesk://workspace/local
Env files
4
Keys
61
Findings
2
.env.production
hash 8fb2a12c0e
DATABASE_URLsk_live_****************secret
NEXT_PUBLIC_APP_URLhttps://envdesk.localpublic
STRIPE_WEBHOOK_SECRETwhsec_**************secret
SENTRY_DSNplaceholderplaceholder
Product Tour
See EnvDesk in Action
Watch the interactive product tour showcasing local secret encryption and rapid workspace filtering.
Workflow
From unknown repo to readable env map.
EnvDesk is a focused desktop workspace for managing environment variables across all your projects.
1
Import a project folder or .env file.
Drop a directory or file. EnvDesk scans all .env files instantly.
2
Encrypt & unlock local workspace.
Protect your variables with AES-256-GCM passphrase encryption.
3
Edit & sync realtime with disk.
Add, edit, delete, or reorder keys. Changes sync instantly two-ways with your disk files.
Why it helps
Built around the work developers actually do.
Folder & .env file import
Drop a whole repository or a single .env file. EnvDesk automatically discovers and maps all environment files.
Realtime 2-way disk sync
Any change made in external editors (VS Code, Cursor) or inside EnvDesk syncs instantly across your project.
Inline editor & drag-drop reorder
Add, edit, mask, and drag-and-drop to reorder keys. Your app layout mirrors your .env file 1:1.
Install
Download the desktop build and start with one project folder.
Releases live on GitHub while installer packaging evolves. Pick the build for your OS, then import a project folder locally.