Projects & secrets in the browser

Secrets live inside an environment of a project, and you can manage all of it from the web app — it encrypts and decrypts in your browser, exactly like the CLI.

Unlock first

Creating a project or reading a secret needs your encryption key. If Projects shows "Your encryption key is locked", or a secrets page shows Unlock encryption, enter your account password. Until you do, "New project" stays disabled — this stops you from creating a project whose secrets could never be sealed.

Create a project

• From the sidebar choose Projects, then "New project".
• Name it and create it. A "development" environment is added for you, so there is somewhere to put secrets straight away.
• Add more environments — staging, production — from the project page.

Add and reveal secrets

• Open a project, choose an environment, and select "Add secret". Enter a key and value — the value is encrypted in your browser before it is sent.
• Values are masked in the list; use the reveal control on a row to decrypt and show one.
• You can also bulk-import a .env, or copy secrets from another environment.