Gosafekeeper
A tiny CLI tool for safely managing and sharing .env files alongside your code across teams.
| Type | Open-source CLI |
|---|---|
| Year | 2025 |
| Where | Personal, on npm |
| Role | Author |
| Stack | Node.js, TypeScript, Commander, Inquirer, npm |
Overview
A free, offline and lightweight CLI tool for managing and sharing encrypted .env files across teams, so sensitive environment variables can be safely version-controlled and synchronized without risk of exposure.
My contribution
- Ideated and built the entire CLI from scratch using Node.js, Commander, and Inquirer.
- Designed a simple, strong encryption flow using AES-256-GCM for .env handling.
- Implemented local encrypted key storage to simplify key reuse while staying secure.
- Developed CLI commands for encryption, decryption, and key management (list, get, set, delete).
- Focused on developer experience with color-coded prompts and informative output.
- Ensured fully offline operation for complete control and privacy.
Key features
- AES-256-GCM encryption for strong, modern, symmetric security.
- Fully offline and dependency-free: no cloud, no network calls.
- Encrypt and decrypt .env files with simple commands.
- Optional custom or auto-generated secret keys.
- Built-in key management with local encrypted storage.
- Interactive CLI powered by Inquirer.
- Supports multiple keys and environments (dev, staging, prod).
- Version-controlled safe sharing: encrypted files can be committed to Git.
- Clear feedback and helpful prompts throughout every command.
- Lightweight and free, ideal for small teams or solo developers.
