envseal

envseal 6.2.1

Zero-trust secrets engine that replaces dangerous .env files. AES-256 encrypted vaults, least-privilege tokens for CI/CD, and instant DEK rotation, without ever putting your master password on a runne

  • By Viswajith M P
  • Open Source
  • Updated Oct 10, 2026
Download for Windows

About envseal

An encrypted vault for your API keys and secrets, because .env files have never once kept a secret.

What's new in 6.2.1

New: opt-in environment isolation for run
envseal run now accepts an optional --clear flag. When set, the child process starts with a completely clean environment before any vault secrets are injected.
Run with only the secrets from the vault (no inherited host env vars)
envseal run --clear -- npm start
Works with the existing global-vault flags
envseal run --clear --with-global -- ./deploy.sh
This is useful when you want strict isolation — e.g. CI jobs, containers, or scripts that must not see ambient host variables.
No breaking changes. Existing vaults and workflows continue to work unchanged.
Full Changelog: v6.2.0...v6.2.1
Full Changelog: v6.2.0...v6.2.1

Full release notes »

Technical details

PublisherViswajith M P
Version6.2.1
Release date2026-10-10
LicenseMIT
Installer typezip
Architecturex64
Package IDviswajith275.envseal

Install envseal from the command line

Install with Windows Package Manager
winget install --id=viswajith275.envseal -e
Update to the latest version
winget upgrade --id=viswajith275.envseal -e
Uninstall
winget uninstall --id=viswajith275.envseal -e

command-line-tooldeveloper-toolsencryption-decryptionenviornment-setupenvsealhmac-sha256rust

envseal version history

  • 6.2.0
  • 6.1.0
  • 5.1.0
  • 5.0.0

Frequently asked questions

Is envseal free?

Yes. envseal is free and open-source software released under the MIT license.

What is the latest version of envseal?

The latest version is 6.2.1, released on Oct 10, 2026.

Is it safe to download envseal?

The download button links to the official installer published on github.com, the same file Windows Package Manager installs. You can verify the downloaded file by comparing its SHA-256 checksum with a61bdc12469560b61356786cb7c816e2b02364d18eb00ab3d5ff742eabcde4d2.

Which Windows versions does envseal support?

envseal runs on Windows and is available for 64-bit (x64) systems.

How do I uninstall envseal?

Open Settings › Apps › Installed apps, find envseal and select Uninstall. From the command line, run winget uninstall --id=viswajith275.envseal -e.