25/09/2026
One committed .env file. That's all it takes.
Once a secret hits Git history, it's out — even if you delete it in the next commit, it's still sitting in every clone and every fork that pulled before you noticed.
SnapEnv stores your environment variables encrypted (AES-256-GCM, per-project keys) and delivers them at runtime with one command. Nothing to commit. Nothing to .gitignore and hope nobody forgets.
snapenv pull --env prod
✓ 14 variables written to .env
Free plan: 3 projects, 3 members, full CLI. No credit card.
→ https://snapenv.io