Welcome to Redenv

A zero-knowledge, end-to-end encrypted secret management system designed to replace traditional .env files with secure, version-controlled, and dynamic secret management.

Edit this page

Redenv is a zero-knowledge, end-to-end encrypted secret management system designed to replace traditional .env files. It provides a secure, version-controlled, and dynamic way to manage application secrets using Upstash Redis as a centralized backend.

Why Redenv?#

Modern applications face two critical challenges with secret management:

The `.env` Problem#

Synchronization nightmare across teams and environments
Insecure sharing via Slack, email, or text messages
No version control or audit trail
"Works on my machine" syndrome

The Serverless Problem#

Rebuild to rotate: Changing a secret requires full redeployment
Configuration coupled with code: Simple config changes need CI/CD pipelines
Slow emergency response: Leaked keys take minutes to rotate

How Redenv Solves This#

Redenv decouples configuration from deployment with:

🔐 Zero-Knowledge Encryption: AES-256-GCM encryption ensures your secrets are never stored in plaintext
📦 Centralized Storage: Single source of truth in your Upstash Redis instance
⏱️ Version History: Complete audit trail with instant rollbacks
⚡ Dynamic Updates: Rotate secrets without redeploying (seconds vs. minutes)
🛠️ Developer-First: Powerful CLI and runtime SDKs for any workflow

Quick Example#

# Install CLI
bun add -g @redenv/cli

# Connect to Upstash
redenv setup

# Register project
redenv register my-app

# Add a secret
redenv add API_KEY "super-secret-value"

// Use in your app
import { Redenv } from "@redenv/client";

const redenv = new Redenv({
  project: "my-app",
  tokenId: process.env.REDENV_TOKEN_ID,
  token: process.env.REDENV_TOKEN_KEY,
  upstash: { url: "...", token: "..." },
});

const env = await redenv.load(); // Secrets loaded & cached
console.log(env.API_KEY); // Access securely