About envseal
An encrypted vault for your API keys and secrets, because .env files have never once kept a secret.
Zero-trust secrets engine that replaces dangerous .env files. AES-256 encrypted vaults, least-privilege tokens for CI/CD, and instant DEK rotation, without ever putting your master password on a runne
An encrypted vault for your API keys and secrets, because .env files have never once kept a secret.
New: opt-in environment isolation for run
envseal run now accepts an optional --clear flag. When set, the child process starts with a completely clean environment before any vault secrets are injected.
Run with only the secrets from the vault (no inherited host env vars)
envseal run --clear -- npm start
Works with the existing global-vault flags
envseal run --clear --with-global -- ./deploy.sh
This is useful when you want strict isolation — e.g. CI jobs, containers, or scripts that must not see ambient host variables.
No breaking changes. Existing vaults and workflows continue to work unchanged.
Full Changelog: v6.2.0...v6.2.1
Full Changelog: v6.2.0...v6.2.1
| Publisher | Viswajith M P |
|---|---|
| Version | 6.2.1 |
| Release date | 2026-10-10 |
| License | MIT |
| Installer type | zip |
| Architecture | x64 |
| Package ID | viswajith275.envseal |
winget install --id=viswajith275.envseal -ewinget upgrade --id=viswajith275.envseal -ewinget uninstall --id=viswajith275.envseal -eYes. envseal is free and open-source software released under the MIT license.
The latest version is 6.2.1, released on Oct 10, 2026.
The download button links to the official installer published on github.com, the same file Windows Package Manager installs. You can verify the downloaded file by comparing its SHA-256 checksum with a61bdc12469560b61356786cb7c816e2b02364d18eb00ab3d5ff742eabcde4d2.
envseal runs on Windows and is available for 64-bit (x64) systems.
Open Settings › Apps › Installed apps, find envseal and select Uninstall. From the command line, run winget uninstall --id=viswajith275.envseal -e.