The worldwide standard for securing environment variables

Dotenv is the proven way to secure environment variables at every scale. Store secrets and app configuration securely with a single file.

Get Started

More than 1,000,000 developers use and trust Dotenv.

DB_HOST=localhost
DB_PASSWORD=pa$$word
ENCRYPT_PUBLIC_KEY=5daef8d0b8c62f9569a634c88574cdd0
GATSBY_API_URL=http://localhost:3000/gatsby
MAILCHIMP_API_USERNAME=d3a5f1d9f215941181752a7f0bda5380
S3_KEY=cd89a34bcd76
SIGN_PUBLIC_KEY=84a8cfc121cb6b517f7c11c92cad2cc7
STRIPE_KEY=scr_a34bd7c37abc
STRIPE_PUBLIC_KEY="pub_z17ab3d3741a"

.env

The first choice of developers, startups, and tech giants everywhere

More than 1,000,000 developers, and their companies, trust Dotenv to protect their secrets and app configuration.

Get Started

Learn more

1M+ Developers

250K+ Organizations

100M+ Installs per month

Start using in seconds

With API libraries for pretty much every programming language you can think of, Dotenv fits seamlessly into any stack.

// Install with npm
$ npm install dotenv --save

// Create a .env file
$ echo "HELLO=World" >> .env

// Require
require('dotenv').config()

// Example usage
console.log(`Hello, ${process.env.HELLO}!`) // Hello, World!

// Learn more at https://github.com/motdotla/dotenv

// Create a .env file and preface each env with REACT_APP_
$ echo "REACT_APP_HELLO=World" >> .env

// Run your react app and output the env somewhere
console.log(`Hello, ${process.env.REACT_APP_HELLO}!`) // Hello, World!

// Learn more -> https://www.youtube.com/watch?v=TFIt9o6BWqA

# Install with rubygems
$ gem install dotenv

# Create a .env file
$ echo "HELLO=World" >> .env

# Require
require 'dotenv/load'

# Example usage
puts "Hello, #{ENV['HELLO']}" # Hello, World!

# Learn more at https://github.com/bkeepers/dotenv

See more languages and their libraries

Serious protection, at multiple layers

Dotenv makes it easy to add layers of protection depending on the security requirements of your organization. Each layer is best in class.

🏆 Layer 1 Protection

Install dotenv library

Store secrets and app configuration separately from source code, with a single .env file.

Over 100 Million installs per month.

$ npm install dotenv

🔐 Layer 2 Protection

Secure with Dotenv Vault

Securely sync secrets and app configuration across machines, environments, and team members.

Stop sharing .env files over insecure channels like Slack and email.

Over 3,000 organizations trust and use Dotenv Vault.

$ npx dotenv-vault new

🛡 Layer 3 Protection

Configure Vault Access

Incredibly advanced permissions allow you to control access to your secrets and app configurations across your entire organization.

Stop worrying about a junior developer overwriting an important environment variable. Protect and configure at the organization, project, environment, and even individual secret level.

Hundreds of organizations have already graduated to Layer 3 Protection.

Visit ui.dotenv.org

Go secure in minutes

It is easy to go secure with Dotenv Vault.

// Configure Dotenv Vault
$ npx dotenv-vault new

// Secure in Dotenv Vault
$ npx dotenv-vault push

// Learn more at https://github.com/dotenv-org/dotenv-vault

Security →

Learn more about the layers of protection

1-Click Integrations

Dotenv supports a wide range of 1-click integrations and growing rapidly. Managing environment variables across your infrastructure has never been easier.

Most popular