CLI-first secret management

Stop losing
API keys.

The secret vault built for developers. Manage API keys, database credentials, and .env files across all your projects. One command to sync. Zero excuses to hardcode.

Free forever tier No credit card 2-min setup
E2E Encrypted
AES-256-GCM
CLI-Ready
brew install meowpass
Zero-Knowledge
We can't see your data
Open Source
Audit the code

Built for how developers actually work

Stop copying secrets from Slack. Stop grepping through old emails for that database URL. MeowPass fits into your workflow.

Secret Vault

Store API keys, tokens, certificates, and connection strings. Organized by project, environment, and team.

.env Sync

Pull secrets directly into your .env files. One command syncs staging, production, or any custom environment.

Team Sharing

Share vaults with your team. Role-based access, audit logs, and automatic key rotation for enterprise security.

Enterprise-grade security

Your engineering team's secrets, actually secure

Every secret is encrypted before it leaves your device. Zero-knowledge architecture means even we can't read your API keys. Built for teams that ship fast without compromising security.

  • AES-256-GCM encryption at rest and in transit
  • Role-based access control per vault
  • Full audit log of every secret access
  • Automatic credential rotation policies
  • SOC 2 Type II compliant infrastructure
Vault: acme-productionEncrypted
STRIPE_SECRET_KEY
sarah2h ago
DATABASE_URL
mike1d ago
OPENAI_API_KEY
sarah3d ago
AWS_SECRET_ACCESS_KEY
alex5d ago
REDIS_URL
sarah1w ago
5 secrets · 3 team members E2E encrypted
Trusted by 0+ developers

Works with your stack. No vendor lock-in.

GitHub
GitLab
VS Code
Docker
AWS
Vercel
Netlify
Homebrew
npm

Everything you need to ship securely

From solo side projects to enterprise teams, MeowPass scales with you.

Secret Vault

Encrypted storage for API keys, tokens, connection strings, and certificates. Organized by project.

.env Sync

One command pulls all secrets into your local .env. Supports staging, production, and custom environments.

CLI Access

Install via Homebrew or npm. Full CLI for CI/CD pipelines, shell scripts, and developer workflows.

Webhook Secrets

Manage signing keys and webhook credentials. Auto-rotate keys on a schedule you define.

Team Sharing

Invite teammates with granular permissions. Admin, write, or read-only access per vault.

Breach Alerts

Monitor your credentials against known breaches. Get notified instantly when a key is compromised.

your-reality.env
# Where was that Stripe key again?
STRIPE_KEY=sk_live_...check_slack_dm_from_march
# TODO: rotate this, it's been 2 years
DATABASE_URL=postgres://root:password123@...
# Mike had this, he left 6 months ago
AWS_SECRET=AKIA...ask_devops_channel
# Is this staging or prod? Nobody knows
OPENAI_KEY=sk-...from_my_personal_account_lol
# 47 API keys across 12 services
# 4 teammates who "have the key somewhere"
# 0 rotation policy
# 1 breach away from disaster

This is your codebase.
We both know it.

You have 47 API keys scattered across Slack DMs, sticky notes, and .env files you're terrified to touch. Your last "rotation" was copying a key from a coworker who left 6 months ago.

MeowPass replaces the chaos with a single encrypted vault. Every secret, every project, every teammate — one source of truth.

Fix this in 2 minutes

Simple, developer-friendly pricing

Start free. Scale when you're ready. No surprises.

Developer

$0/month

Perfect for side projects and personal use

  • 1 vault
  • 50 secrets
  • CLI access
  • Browser extension
  • Community support
Get Started Free
Most Popular

Pro

$5/month

For developers shipping multiple projects

  • Unlimited vaults
  • Unlimited secrets
  • .env sync
  • API access
  • Project organization
  • Priority support
Start Pro Trial

Team

$9/user/month

For engineering teams sharing secrets

  • Everything in Pro
  • Shared team vaults
  • Role-based access
  • Audit logs
  • SSO / SAML
  • Secret rotation
  • Admin console
Start Team Trial
CLI Reference

Up and running in 2 minutes

Install with Homebrew, authenticate, and start managing secrets. Every command you need.

Quickstart

Install & Setup
# Install via Homebrew
$brew install chpecson/tap/meowpass
# Authenticate (opens browser for device flow)
$meowpass login
Open your browser and enter this code:
Code: ABCD-1234
Logged in as you@example.com
# Create your first vault
$meowpass vault create my-project
Vault 'my-project' created (ID: a1b2c3d4)

Managing Secrets

set / get / list / delete
# Store a secret (AES-256-GCM encrypted)
$meowpass set STRIPE_KEY sk_live_... --vault a1b2c3d4
# Retrieve (auto-copies to clipboard)
$meowpass get STRIPE_KEY --vault a1b2c3d4
Secret 'STRIPE_KEY' copied to clipboard
# List all keys in a vault
$meowpass list --vault a1b2c3d4
KEY VERSION UPDATED
STRIPE_KEY v1 2026-05-04
DATABASE_URL v3 2026-05-02
OPENAI_API_KEY v1 2026-04-28
# Delete a secret
$meowpass delete OLD_KEY --vault a1b2c3d4

.env Sync

pull / push
# Pull secrets into .env.production
$meowpass pull --vault a1b2c3d4 --env production
Synced 12 secrets to .env.production
# Push local .env to vault
$meowpass push --vault a1b2c3d4 --env staging
Pushed 8 secrets from .env.staging
# Or pull default .env (no --env flag)
$meowpass pull --vault a1b2c3d4
Synced 12 secrets to .env

Vault Management

vault create / list / delete
# Create vaults per project
$meowpass vault create acme-api
$meowpass vault create acme-web
# See all your vaults
$meowpass vault list
ID NAME CREATED
a1b2c3d4 acme-api 2026-05-01
e5f6g7h8 acme-web 2026-05-04
# Delete a vault
$meowpass vault delete e5f6g7h8

Team Sharing

share / whoami
# Share a vault with your team (E2E encrypted via X25519)
$meowpass share a1b2c3d4 --team backend
Vault shared with team. E2E encrypted.
# Check your current session
$meowpass whoami
Email: sarah@acme.dev
Name: Sarah Chen
Plan: Pro
# Log out (clears token + master key)
$meowpass logout

Your API keys deserve
better than a Slack DM.

Join 10,000+ developers who stopped hardcoding secrets. Set up MeowPass in 2 minutes.