Phase.dev

Open-source, end-to-end encrypted platform to manage, sync and share environment variables. Phase works for your dev environment, CI pipelines and cloud infrastructure with 0 code changes or added dependencies.

Import & encrypt secrets from existing .env files. Securely inject secrets into any platform or framework at runtime. No dependencies or code changes required.

• Plug and play integration: Inject secrets scoped only to your app as environment variables during runtime. Use process.env / os.environ.get to read them — no dependencies or code changes required.
• Simplify development: Effortlessly maintain separation between dev, staging, prod environments and quickly switch in between them. Avoid using production secrets in development.
• Always in sync: Import secrets from .env files and securely sync them with your team. Eliminate ad-hoc secret coordination with other teams over Slack.
• Secure by default: The Phase CLI uses end-to-end encryption with private-key sharding via secret sharing schemes to avoid a single point of compromise.
• Works where you work: The Phase CLI works on your laptop, CI, Docker containers, Virtual Machines and Kubernetes clusters. Role-based Access Control: Separate keys for each user and environment. Manage environment permissions with granular RBAC tools.
• Audit logs: Keep track of changes to secrets, user roles, permissions and access events with detailed logs.
• Secret versioning: All secret changes are automatically versioned. Easily view changes with git styled diffs and roll-back changes with one click.
• Point-in-time recovery: Restore entire environments to a previous version if something goes wrong. The Phase Console gives you a get-out-of-jail-free card.
• Service tokens: Specifically scope and create tokens for local development, CI builds or production environments.
• Secret referencing: Create references to other secrets and inherit values across environments.

Phase works with all major cloud providers, build tools and CI pipelines. Native integrations keep your secrets synced with your entire stack.