Self-hosted team secrets and env-var manager, no per-seat Doppler bill.
Agencies pay per-seat and per-client fees that scale with their success. Self-hosted, pay-once tools replace per-seat pricing with a flat cost that margins actually survive.
The tool this job usually means renting is Doppler Team, at $12/user/mo — roughly $144 a year, every year. Secretbox does the job for a one-time $39 — running on infrastructure you control.
Every value gets its own random AES-256-GCM data key, wrapped by a master key that lives only in your .env and never in the database.
For agencies, envelope encryption at rest pays off across every client account, with no per-seat math — and it's covered by the same one-time $39, not metered per month.
Organize projects into dev, staging, prod and custom environments, with secret versioning and one-click rollback.
For agencies, projects and environments pays off across every client account, with no per-seat math — and it's covered by the same one-time $39, not metered per month.
Every reveal, pull, edit and rollback is recorded with who, what and when.
For agencies, audit-logged reveals pays off across every client account, with no per-seat math — and it's covered by the same one-time $39, not metered per month.
One payment of $39 gets you the packaged 1-click installer, or clone the MIT source at github.com/bensblueprints/env-secrets-manager-mvp and run it yourself for free.
docker compose up on a $5 VPS behind HTTPS, or run the Electron desktop build, then set ADMIN_PASSWORD and back up your MASTER_KEY.
Point the zero-dependency CLI at your host with a scoped token and run secretbox pull or secretbox run to feed secrets straight into your deploys.
Secretbox is $39, once. Doppler Team at $12/user/mo — roughly $144 a year, every year. Under four months of Doppler for a five-person team already costs more than Secretbox, which then never charges per seat again.
Under four months of Doppler for a five-person team already costs more than Secretbox, which then never charges per seat again. Secretbox costs $39 once; Doppler Team charges $12/user/mo — about $144 a year. For agencies, that fixed cost is the whole point: the tool is a one-time line item, not a monthly one.
Yes. Secretbox is MIT-licensed at github.com/bensblueprints/env-secrets-manager-mvp and always will be. The $39 buys the packaged 1-click installer and setup; building from source is free.
In a SQLite database on your own server, envelope-encrypted per value. Nothing goes to us or any third-party cloud.