envsync init
Initialize envsync on this machine and create local encrypted state.
Loading…
Documentation
Complete `envsync` command list and what each command does.
envsync - encrypted env var sync
Usage:
envsync init
envsync login [--token <token>]
envsync logout
envsync whoami
envsync project create <name>
envsync project list
envsync project use <name>
envsync team create <name>
envsync team list
envsync team use <name>
envsync team add-member <team> <actor> <role>
envsync team list-members [team]
envsync env create <name>
envsync env use <name>
envsync set <KEY> <value>
envsync rotate <KEY> <value>
envsync get <KEY>
envsync delete <KEY>
envsync list [--show]
envsync load
envsync history <KEY>
envsync rollback <KEY> --version <n>
envsync push [--force]
envsync pull [--force-remote]
envsync phrase save
envsync phrase clear
envsync doctor
envsync restoreenvsync init
Initialize envsync on this machine and create local encrypted state.
envsync login [--token <token>]
Open browser onboarding, generate a CLI token from Devices, then save a local cloud session.
envsync logout
Sign out and clear stored cloud session.
envsync whoami
Show your authenticated cloud identity.
envsync project create <name>
Create a new project namespace.
envsync project list
List all available projects.
envsync project use <name>
Set the active project for subsequent commands.
envsync team create <name>
Create a new team.
envsync team list
List all teams.
envsync team use <name>
Set the active team.
envsync team add-member <team> <actor> <role>
Add a member (actor) to a team with a role.
envsync team list-members [team]
List members of a team. Uses active team if omitted.
envsync env create <name>
Create an environment (for example: dev, staging, prod).
envsync env use <name>
Set the active environment.
envsync set <KEY> <value>
Create or update a secret key with a value.
envsync rotate <KEY> <value>
Rotate a secret by writing a new version for an existing key.
envsync get <KEY>
Read the current value for a key.
envsync delete <KEY>
Delete a key from the active project/environment.
envsync list [--show]
List keys. Use --show to include values in output.
envsync load
Load active env vars into shell-compatible output/workflow.
envsync history <KEY>
Show version history for a key.
envsync rollback <KEY> --version <n>
Rollback a key to a previous version number.
envsync push [--force]
Push local encrypted state to remote. --force overrides conflict checks.
envsync pull [--force-remote]
Pull remote encrypted state to local. --force-remote prefers remote on conflicts.
envsync phrase save
Save recovery phrase to local keychain/secure storage.
envsync phrase clear
Clear stored recovery phrase from local keychain/secure storage.
envsync doctor
Run diagnostics for local config, state, and remote connectivity.
envsync restore
Restore local state from remote using your recovery phrase.
1) Sign in with Google or GitHub.
2) Generate a CLI token from Dashboard > Devices and paste it into `envsync login`.
3) New device stays pending until approved by an existing approved device or recovery fallback.
4) Only encrypted snapshots and wrapped keys are stored in the cloud.
5) Removing a device immediately blocks future decrypt-capable operations from that device.