The price anchor
| Secretbox | Doppler Team | |
|---|---|---|
| Monthly | $0 — no subscription | $12/user/mo |
| Annual | $0 after purchase | $144 |
| 5-year total | $39 | $720 |
| 10-year total | $39 | $1,440 |
Subscription figures from the vendor's published pricing ($12/user/mo, ~$144/yr); the Secretbox column is the full price, paid once.
Break-even analysis
Under four months of Doppler for a five-person team already costs more than Secretbox, which then never charges per seat again.
- After 1 year: Secretbox has cost you $39 total — Doppler Team has cost $144.
- After 3 years: Secretbox is still $39 — the subscription is at $432.
- After 5 years: Secretbox is still $39 — the subscription is at $720.
What you get for $39 once
- Envelope encryption at rest. Every value gets its own random AES-256-GCM data key, wrapped by a master key that lives only in your .env and never in the database.
- Projects and environments. Organize projects into dev, staging, prod and custom environments, with secret versioning and one-click rollback.
- Audit-logged reveals. Every reveal, pull, edit and rollback is recorded with who, what and when.
- Environment diff. See which keys are missing or different between dev and prod without exposing the values.
- Scoped API tokens. Per-project, read-only or read-write tokens, shown once and stored as SHA-256 hashes.
- No renewal, ever. The license does not expire and there is no per-seat meter — $39 is the whole price.
Pricing questions
Is it really free on GitHub?
Yes. Secretbox is MIT-licensed at github.com/bensblueprints/env-secrets-manager-mvp and always will be. The $39 buys the packaged 1-click installer and setup; building from source is free.
Where do my secrets live?
In a SQLite database on your own server, envelope-encrypted per value. Nothing goes to us or any third-party cloud.
Is this zero-knowledge like Vaultly?
No, and honestly so: this is server-side encryption, because a secrets manager that feeds CI must hold the key to hand plaintext to your deploys. If you need client-side zero-knowledge crypto, that is our Vaultly product. Protect the box and protect the .env.
Is this a subscription in disguise?
No. $39 once, no renewal, no per-seat billing, no license server. Just back up your MASTER_KEY, because without it your secrets are unrecoverable.
Secretbox — $39, one time
Or get Secretbox plus every other app in the suite: the OneTimeSuite bundle is currently $97, one time.