SECURITY
The key never arrives here.
Your browser encrypts each ENV file with AES-256-GCM before upload. Our server stores the encrypted envelope and store metadata. The CLI fetches that envelope and decrypts it on your machine.
There is no recovery flow.
A lost key is the end of that file. Inviting a teammate does not give them the key. Share it through a separate channel you trust.