DropEnv

DropEnv lets you share environment variables through temporary links, with encryption handled in the browser.

Year2025
PlatformWeb
LinkDropEnv
DropEnv Hero

Sharing `.env` secrets over Slack or chat apps exposes keys to plain text storage. DropEnv encrypts config in the client browser with ephemeral zero-knowledge storage.

Challenge

The important part was encrypting the contents before they leave the browser and controlling how long a shared link remains available.

Action

Client-side AES encryption

I used the Web Crypto API with AES-GCM. The decryption key is kept in the URL fragment rather than sent as part of the normal request to the server.

Ephemeral lifecycle & auto-destruction

Added link expiry and view limits so shared content can be removed after a set time or number of views.

Result

The result is a small tool for sharing configuration data without pasting the contents directly into chat.

Stack

TypeScriptNext.jsNode.jsWeb Crypto APITailwind CSS