vaultenv-cli
v2.0.2
Published
Backup and restore .env files across machines with end-to-end encryption
Maintainers
Readme
vaultenv-cli
Backup and restore .env files across machines with end-to-end encryption.
Quick Start
npm install -g vaultenv-cli
vaultenv init # On your primary machine (generates recovery phrase)
vaultenv login # On a new laptop (authenticates using your 12-word phrase)
vaultenv backup # Back up all .env files in your workspace
vaultenv restore # Restore .env files on any machineCommands
| Command | Description |
|---------|-------------|
| vaultenv init | Generate a 12-word recovery phrase and create a new vault |
| vaultenv login | Log in to an existing vault on a new machine using your 12-word recovery phrase |
| vaultenv backup | Scan for .env files, encrypt, and upload |
| vaultenv restore | Download and restore your latest backup |
| vaultenv list | List all backups for your vault |
| vaultenv view | View backup history and all backed-up .env files |
Options
init --force— Reinitialize even if a vault exists locallyrestore --force— Overwrite existing.envfiles
Multi-Device & Session Security
- Multi-Device Support: Work across multiple laptops seamlessly. Running
vaultenv loginon a new laptop authenticates that machine using your 12-word recovery phrase. - Single Active Session: For maximum security, logging in on a new device automatically invalidates (logs out) any previous active session. Any attempt to use an invalidated session will prompt you to run
vaultenv loginagain.
Security
VaultEnv uses zero-knowledge encryption:
- AES-256-GCM for encrypting backup payloads
- PBKDF2-SHA256 with 600,000 iterations for key derivation
- BIP-39 12-word recovery phrases
- Unique salt and IV per backup
Your recovery phrase never leaves your device. The server only stores encrypted blobs.
⚠️ WARNING: Your 12-word recovery phrase is the only way to access your backups. VaultEnv cannot recover it for you. Store it securely.
Dashboard
View backup history at VaultEnv Dashboard (or your deployed URL).
