Env is the new .env — and it's actually good

Env is a new config management system for developers. Instead of scattering secrets across .env files, databases, and cloud dashboards, it stores them in a single file with per-host keys so only the machine that needs a secret can read it. Think of it as the .env file but with actual security — encrypted, auditable, and not sitting in plaintext on a coworker's laptop.

The company behind it is a small team that's been quietly shipping this thing for a while. It's open source, it's free for small teams, and it integrates with the usual suspects: GitHub Actions, CircleCI, the cloud providers. The pitch is simple: stop putting secrets in .env files. Start using env.

Why this matters for us: a lot of the people I know — developers at small shops, indie hackers, the cousin running his own side gig — are still pasting API keys into plaintext files. This is one of those quiet improvements that makes the whole comunidad safer without anyone having to learn a new framework.