En

EnvKey 2.0 – End-To-End Encrypted Environments (now open source)

Hacker News

EnvKey 2.0 – End-To-End Encrypted Environments (now open source)

Hey HN, I'm so happy to finally show you all this release after years of hard work. I posted the first version of EnvKey to HN back in 2017 ( https://news.ycombinator.com/item?id=15330757 ), then went through YC in W18 ( https://news.ycombinator.com/item?id=16569534 ). EnvKey is an end-to-end encrypted configuration and secrets manager. It protects your organization's API keys, encryption keys, credentials, and other secrets, and makes it easy to run servers, scripts, tests, and everything else with the latest config. It also helps you avoid duplication in your configuration, react to environment updates in real-time, resolve conflicts smoothly, and a lot more. You get an intuitive, spreadsheet-like UI for managing environments, along with a developer-friendly CLI that does almost anything the UI can. Running any program in any language with the latest environment variables is as simple as: envkey-source -- any-shell-command You can use the `es` alias to type less: es -- any-shell-command You can automatically reload a process whenever there's a change using the -w flag: es -w -- ./start-server To avoid downtime on reloads, add the --rolling flag to reload gradually across all connected processes: es -w --rolling -- ./start-server You can run custom logic when there's a change instead of restarting: es -r ./reload-env.sh -- ./start-server Or run something only when there's a change: es -r ./env-change-hook.sh You can pass command line arguments from EnvKey variables (just wrap your command in single quotes): es 'curl https://$HOST_URL' You can export your environment to the current shell: eval "$(es)" Or auto-load the latest environment in any EnvKey-enabled directory (like direnv): echo $'\n\neval "$(es --hook bash)"\n' >> ~/.bash_profile EnvKey is now open source under the MIT license and can be self-hosted. Our Cloud and Enterprise Self-Hosted products also include commercially licensed server-side extensions for auto-scaling, highly available infrastructure and advanced user management. Cloud is free for up to 20 user devices and 40 server keys. EnvKey's client-side end-to-end encryption is built with the NaCl crypto library. Whether you use EnvKey Cloud or host EnvKey yourself, no configuration or secrets are ever sent to the host running EnvKey in plaintext. Public keys are verified by a web of trust. Invitations are verified out-of-band. Secrets are never accessed through a web browser. More details on security and encryption can be found here: https://docs-v2.envkey.com/docs/security Let me know what you think! Thanks!

Share card

Actual performance

225points
65comments
Made the leaderboard

Launch Intel predictions

Analyze your own launch →
Product HuntOn track for Day 1 leaderboard · Strong signals: user, new, single · Missing: mac, agents, macos
89%89% predicted probability of success on Product Hunt, based on ML models trained on real launch data.
Hacker NewsStrong engagement from HN community · Strong signals: open source, ide, io · Missing: https docs, excited, just released
87%87% predicted probability of success on Hacker News, based on ML models trained on real launch data.
nativeThis product was originally launched on this platform.
Indie HackersFits the IH revenue-focused audience · Missing: supports, reddit linkedin, podcasting
86%86% predicted probability of success on Indie Hackers, based on ML models trained on real launch data.
AppSumoMay struggle as an AppSumo deal · Strong signals: intuitive, host, friendly · Missing: plus, platform, reviews
39%39% predicted probability of success on AppSumo, based on ML models trained on real launch data.
TrustMRRLess likely to generate early MRR · Missing: mobile apps, ios, personal
39%39% predicted probability of success on TrustMRR, based on ML models trained on real launch data.
Acquire.comPre-revenue stage for this audience · Missing: arr, mrr, revenue
17%17% predicted probability of success on Acquire.com, based on ML models trained on real launch data.
BetaListMay not resonate with beta-testers · Strong signals: crypto · Missing: web3, chat, cryptocurrency
0%0% predicted probability of success on BetaList, based on ML models trained on real launch data.

Correct prediction on native model

Similar products

Op
Open-Source, End-to-End Encrypted, Anywhere-to-Anywhere, RPCs83%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Open-Source, End-to-End Encrypted, Anywhere-to-Anywhere, RPCs

Hacker News6
Pr
PrivatePing: Secure End-to-End Encrypted Open-Source Messaging Platform74%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

PrivatePing: Secure End-to-End Encrypted Open-Source Messaging Platform

Hacker News4
Et
Etebase – An open source and end-to-end encrypted Firebase alternative81%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Etebase – An open source and end-to-end encrypted Firebase alternative

Hacker News308
blindsend
blindsend34%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Open-source end-to-end encrypted file transfer

Indie Hackers1apis
Op
Open source, end-to-end encrypted task management for activists81%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Open source, end-to-end encrypted task management for activists

Hacker News3
Op
Open-source cypress for back end testing71%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Open-source cypress for back end testing

Hacker News22
En
End-to-End Encrypted Cloud Storage. All Open Source82%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

End-to-End Encrypted Cloud Storage. All Open Source

Hacker News42
Or
Orion - An alternate front end to graphite (Open sourced)73%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Orion - An alternate front end to graphite (Open sourced)

Hacker News1
Bl
Blindsend, Open-Source End-to-End Encrypted File Transfer83%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Blindsend, Open-Source End-to-End Encrypted File Transfer

Hacker News25
vo
voidb.in - An end-to-end encrypted pastebin76%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

voidb.in - An end-to-end encrypted pastebin

Hacker News2