Your .env secrets,
encrypted in one place.

A native macOS app with a menu bar companion for managing .env variables. Hardware keychain encryption.

Download for macOS View on GitHub

Version 1.0.3 · macOS 15.6+ · Apple Silicon & Intel

Touch ID & Password Unlock

The vault starts locked. Unlock with Touch ID or your macOS password, using the same device-owner authentication model Apple uses for Passwords.

Hardware-Backed Encryption

AES-256-GCM via the Secure Enclave on Apple Silicon. Your master key lives in macOS Keychain. It never leaves your device unencrypted. Apple can't read your vault.

CloudKit + iCloud Keychain Sync

Opt-in sync across Macs. The encrypted blob travels via CloudKit, the key via iCloud Keychain. Conflicts are detected. You pick the winner. No auto-merge.

Menu Bar Companion

A full native app with a menu bar companion for quick access. Browse projects, copy values in one click.

Import & Export

Standard .env format with conflict resolution. Encrypted .envvault backups.

Auto-Lock & Clear

Configurable auto-lock timeout. Clipboard auto-clears after copying secrets.

Install

  1. Open the .dmg and drag Pocket Vault to Applications.
  2. Launch from Applications or Spotlight. The app lives in your menu bar.
  3. Complete the short onboarding to set up your vault.

Open Source

Pocket Vault is open source and built with zero third-party dependencies. Issues, feature requests, and contributions are welcome.

Report an issue on GitHub

or email [email protected]