klefdev phase

The zero-knowledge .env sync for developers.

Push from one laptop, pull on another, share with your team. Nobody in between, us included, ever sees your values. Every secret is encrypted on your device before it leaves.

Klef is in active development.

Zero-knowledge

Argon2id + XChaCha20-Poly1305 on your device. The server stores ciphertext only. We can't read your secrets, even if we wanted to.

Per-environment keys

Every environment gets its own symmetric key. Compromise local and staging stays safe. Share at the project level, not the secret.

History + restore

Every change is versioned. Roll back a single key to last Tuesday, or restore one you accidentally deleted. Full audit log included.