// dotenv-vault replacement
Looking for a dotenv-vault replacement?
dotenv-vault was deprecated — its makers moved to dotenvx, which takes a different bet: encrypt your .env and commit it to your repo, then distribute keys out-of-band. If you liked dotenv-vault's managed push/pull vault with a dashboard, EnvSync is the maintained successor — same workflow, still zero-knowledge.
| EnvSync | dotenvx (repo-based) | |
|---|---|---|
| Managed vault (push / pull) | ✓ | ✗ file in repo |
| Dashboard + access logs | ✓ | ✗ |
| Secrets stay out of your repo | ✓ | ✗ committed |
| Invite / offboard a developer | ✓ one click | ✗ re-share keys |
| Zero-knowledge | ✓ | ✓ (in repo) |
| Versioned rollback | ✓ | git history |
Reflects common/default configurations as of 2026.
The vault workflow you already know
envsync login → push → pull. Encrypted on your machine, synced to a managed vault — no secrets in your git history, no key-passing dance.