EnvVaultStart
Overview
What EnvVault is, who it is for, and how the desktop app is structured.
Purpose
EnvVault is a free local-first macOS app for inspecting, comparing, and safely managing dotenv files across projects. It is designed for developers who need to understand environment variables without casually exposing secrets, committing unsafe files, or losing track of differences between local, development, staging, and production environments.
Current application
- Version 0.22.0.
- Distributed as a free macOS app.
- Source code is not included with the free app distribution.
- Built with Tauri 2, React, TypeScript, Vite, Rust, SQLite, and macOS Keychain.
- The app is local-first. It does not send project secrets to a remote service.
- Raw secret values belong in macOS Keychain when the Tauri app is running.
- SQLite stores metadata such as project paths, key names, statuses, warnings, value previews, value hashes, notes, and Keychain references.
- Optional App Lock can hide project metadata until the local app lock is unlocked.
Primary areas
| Area | Purpose |
|---|---|
| Dashboard | Live overview of projects, selected env file data, comparisons, and security score. |
| Projects | Detailed project workspace for env files, runtime profiles, connector config, sync, history, and recovery. |
| Variables | Searchable and filterable table that can inspect either parsed env-file variables or runtime profile variables. |
| Compare | Matrix for comparing variables across env files and environments. |
| Security | Warnings, ignored-warning review, and score covering dotenv files, runtime profiles, imports, connector config, and .gitignore coverage. |
| Settings | App preferences, App Lock, backups, audit activity, and runtime CLI setup. |
| About | Version, author, local security model, and app boundary details. |