In simple English
Keeping track of passwords and API keys across different computers is hard. This tool puts all your secret settings into a secure dashboard on the web. You can fetch them straight to your terminal with a single command. It also pushes your keys to GitHub automatically so your server actions work. You can use their cloud version or host the code yourself.
What it is
Shelve is an open-source secrets manager with a web interface, a command-line tool, and GitHub synchronization. It encrypts your sensitive data at rest using standard security algorithms.
What it is good for
Solo builders and small teams who want to stop emailing secret keys or hiding them in scattered configuration files.
- Command-line tool lets you inject environment variables directly into your running app.
- Clean web interface with role-based access for team members.
- Automatically syncs your secrets straight to GitHub repository settings.
- Requires setting up a PostgreSQL database if you decide to self-host.
- Relies on third-party cloud services if you do not run your own instance.
- Active development means frequent updates to manage on your own server.
manually editing local .env files and copying keys into GitHub repository settings
PostgreSQL (a reliable open-source database used to store application data)
- dotenvx/dotenvx5.8k stars
Manages environment variables with encryption for local development and teams.
- Infisical/infisical30k stars
An open-source secret management platform with broader enterprise features and self-hosting options.
- future-architect/vuls12k stars
Scans Linux machines over SSH for installed software with publicly reported security holes.
- cossacklabs/acra1.5k stars
A proxy that encrypts individual database fields on the way in and decrypts them on the way out.
- 0xERR0R/blocky7.0k stars
A small DNS service for a home or office network that refuses to look up advertising and tracking addresses.
npm install -g @shelve/cli shelve login