EnvKey Reviews and details

Social recommendations and mentions

• 1 in 10 developers leaked an API-key in 2022

  You can check out EnvKey[1] as another option (I’m the founder). We have similarly simple UX but are more robust on security. Browser-based end-to-end encryption is a bit of a fig leaf—it doesn’t protect against insider threats. 1 - https://envkey.com. - Source: Hacker News / almost 2 years ago

• Launch HN: Infisical (YC W23) – Open-source secrets manager for developers

  Hey, congratulations on the launch. How does this compare to EnvKey[1]? [1]: https://envkey.com. - Source: Hacker News / about 2 years ago

• Launch HN: Idemeum (YC S21) – Passwordless access to apps and infrastructure

  In most cases, attempting to roll your own secrets management (or just ignoring secrets management entirely) will end up spraying access across all kinds of third party services (usually in plain text), as engineers resort to sharing secrets via email, chat, file sharing, and other tools to get their work done. The cost/benefit/risk calculation to doing this yourself isn't good. Using open... - Source: Hacker News / over 2 years ago

• Toyota Accidently Exposed a Secret Key Publicly on GitHub for Five Years

  If anyone out there is using environment variables currently, is interested a quick path to plugging the leaks in their secrets management, check out EnvKey[1] (disclaimer: I'm the founder). Because EnvKey integrates tightly with environment variables, no app code changes are needed to switch, so it only takes a minute or two to import/integrate a typical app. EnvKey is designed to help avoid incidents exactly... - Source: Hacker News / over 2 years ago

• SHGA Shanghai Gov National Police Database Stolen

  If anyone’s looking for something more secure than vanilla env vars but simpler than Vault, you could check out EnvKey[1]. Disclaimer: I’m the founder. It’s end-to-end encrypted, cloud or self-hosted, and very quick to integrate. 1 - https://envkey.com. - Source: Hacker News / almost 3 years ago

• Ask HN: What does your team use to sync and manage secrets?

  We built EnvKey for exactly this purpose: https://envkey.com. - Source: Hacker News / almost 3 years ago

• The Twelve-Factor App

  EnvKey[1] can help with process reloading, and can facilitate both restarts and hot reload updates. (Disclaimer: I’m the founder.) The pros/cons of environment variables vs. Files (or other approaches) is also something I’ve thought about a lot while working on EnvKey. We use environment variables as a default approach, since it seems to be the most common way to pass secrets/config to a process in the wild and we... - Source: Hacker News / about 3 years ago

• “iViewed your API Keys”: Aussie state media publishes env vars

  Shameless plug, but we built EnvKey[1] for exactly this purpose. Instead of providing secrets directly to a server, you generate an ENVKEY token which is used to fetch and decrypt the app’s secrets and config and supply them as environment variables to the process. The ENVKEY still needs to be protected, but you can limit which IPs can access it and if access is cut off, the process will be killed and... - Source: Hacker News / about 3 years ago