SharedEnv: zero-knowledge secrets

Unlock your SharedEnv vault and autofill secrets, decrypted locally in the browser, never seen by the server.

SharedEnv keeps your team's secrets (environment variables, API keys, shared logins, certificates) in end-to-end encrypted vaults. This extension brings them to your browser, decrypted on your device only. WHAT IT DOES - Unlock your vault with your master password. Your key is derived in the browser: the password never leaves it. - See the logins that belong to the site you are on, and fill them in one click. A login is only offered on its own site. - Search every secret of your vaults, reveal or copy a value. Each value is decrypted on the spot, on your machine. - Two-factor authentication: authenticator app, email code or recovery code. - Shares waiting for your answer are counted, and open in the SharedEnv dashboard, where you check who sent them. ZERO-KNOWLEDGE SharedEnv never receives your master password, your private key or a secret in clear. Our servers store encrypted data and public keys only. AES-256-GCM encryption, sharing through signed ECDH (secp256k1), password stretched with scrypt. PRIVACY - The unlocked key lives in the browser's session memory, and is wiped when the browser closes. - The extension reads the address of the current tab when you open it, to match your logins. It is never sent anywhere. - It talks to one server only: the SharedEnv API. A SharedEnv account is required: create one for free at https://sharedenv.com.