KeyEnv
CLI-first secrets manager for dev teams (Rust)
Get picks like this daily. Today's launch numbers, the top launches, AI and tech news, and a daily opportunity pick, straight to your inbox.
Want to reach these readers? Sponsor an issue.
Hi HN,I built KeyEnv because I was tired of the "can you Slack me the Stripe key?" workflow. The problem: My team's secrets lived in a mix of Slack DMs, shared Google Docs, and .env files that definitely weren't in .gitignore at some point. Enterprise tools like Vault required more DevOps time than we had. Doppler was close but felt heavier than we needed. What KeyEnv does: keyenv init # link project keyenv pull # sync secrets to local .env keyenv run -- npm start # inject secrets, run command That's basically it. Secrets are encrypted client-side (AES-256-GCM) before leaving your machine. Zero-knowledge architecture—we can't read your secrets even if we wanted to. Technical details: - Single Rust binary, no runtime dependencies - Works offline (cached secrets) - RBAC for teams (owner/admin/member/viewer) - Service tokens for CI/CD - Full audit trail Honest tradeoffs: - SaaS only, no self-hosted option - Fewer integrations than Doppler - If you need dynamic secrets or PKI, use Vault Pricing: Free tier (3 projects, 100 secrets), $12/user/month for teams. Would love feedback on the CLI UX and any rough edges. Happy to answer questions about the architecture. https://www.keyenv.dev
HN · launched Jan 18, 2026 · 5 upvotes (top 90%) · 0 views
Niche: credential management and security tools · 78 launches, 14 in the last 7 days ▲ +56% · Explore this niche →
Category and tags
- Horizontal
- Dev tools
- Developer
- Not AI
- Commercial product
Visit website ↗ Source listing ↗
More like this: all 78 launches in credential management and security tools →
Could you build this?
Yes A CLI tool written in Rust or Go that communicates with a standard backend API using AES-256-GCM encryption and environment injection is straightforward to build with modern AI assistants.
Discussion
2 comments analyzed.
Competitors mentioned: keypost.ai
Concerns raised: API key rotation complexity, audit logging implementation
Feature requests: Rotation policies
Competitors
Other products that read as similar to this one : 488 launches clear the similarity bar, closest 8 shown.
Attention rank: #479 of 489 (itself plus its competitors, highest first, normalized so YC and Product Hunt are compared fairly).
Launched 80 days after the earliest competitor.
- KeyEnv · ph · 2026-10-12 · 1 upvotes · similarity 0.73
- SecretEnv · hn · 2026-05-05 · 5 upvotes · similarity 0.66
- Lockenv · hn · 2025-12-08 · 105 upvotes · similarity 0.61
- Liberty · hn · 2026-01-14 · 7 upvotes · similarity 0.59
- I just fixed .env once and for all · hn · 2025-11-23 · 8 upvotes · similarity 0.58
- SnapEnv · ph · 2026-09-14 · 3 upvotes · similarity 0.58
- better-env · hn · 2025-11-23 · 6 upvotes · similarity 0.57
- keyshroud · ph · 2026-10-20 · 1 upvotes · similarity 0.56
The niche, labels, vibe code rating and competitor comparison on this page are analysis by Nicheloom. If you use them, please credit nicheloom.com. How you may use our data.