βοΈ Different values for Preview / Development βΈ
Leave blank to reuse the Production value. Vercel pushes send each value to its matching environment.
Loadingβ¦
π Key is in the URL fragment β never sent to any server. One-time use, self-destructs after opening.
π Add Push Target
Configure where this secret gets pushed. Hit π Push and it sets the env var directly β no copy-paste.
Will be set for production, preview, and development environments.
Vercel dashboard β your project β Settings β General β Project ID
Project β Settings β Git β Deploy Hooks. If set, a redeploy fires automatically after every successful push so the new value goes live.
The 20-char ID in your project URL: supabase.com/dashboard/project/ref. Sets an Edge Function secret.
All three IDs are in the Railway dashboard URLs / settings pages.
Your GitHub username or org name
Render dashboard β your service β Settings β Service ID
Cloudflare dashboard β right sidebar β Account ID
The name of your Cloudflare Worker
For Vercel: Vercel API token. For GitHub: Personal Access Token (repo secrets scope).
Only matters if the secret has per-environment values. Vercel targets ignore this β they push each value to its matching Vercel environment automatically.
π₯ Create Team Vault
A shared encrypted vault for your team. Anyone who knows the team password can read and add secrets. Keep your private vault separate.
β οΈ Share this with your teammates. Not recoverable if lost.
π
Unlock Team Vault
Enter the shared team password
π₯
Join Team Vault
You've been invited to a shared vault. Enter the team password to join.
π₯ Key Health Dashboard
Track when secrets were last rotated. Stale keys are a security risk.
π Team Invite Link
Share this link with your teammate. They'll also need to know the team password to join.
β οΈ This link alone isn't enough β the joiner also needs the team password. Share both separately.
π₯ Inbox
Secrets sent to you by others. Decrypt, review, then save to vault or dismiss.
Incoming Secret
π Receive Links
Share a receive link with anyone who needs to send you a secret. They fill out a form β it encrypts in their browser and lands in your inbox.
β New receive link created! Copy it below.
π Anyone with this link can send you a secret securely. Revoke anytime.
π Project Folders
One folder per project. Every key that project needs lives inside it β then π Deploy All pushes the whole folder at once.
π Deploy All
π Import .env File
Drop a .env file or paste its contents. Every KEY=value becomes an encrypted secret in the project you pick.
π Click to choose a .env file β or drag it here
π Activity Log
Append-only record of everything that happened in your vault β saves, deletes, pushes, shares. Failures show in red.