Your entire .env
one key.

Push your .env once, deploy with a single KEYDROP_KEY. Use keydrop run for builds and init() for runtime one key, deploy anywhere.

Before

DATABASE_URL=...
JWT_SECRET=...
OPENAI_API_KEY=...
STRIPE_SECRET_KEY=...

After

KEYDROP_KEY=

Deploy this anywhere. Your app works normally.

How it works

Three steps.
That's all.

$ npm install keydrop

$ npm install -g keydrop-cli

Install

Install both the KeyDrop CLI and SDK. The CLI handles secret management and build-time injection. The SDK handles runtime secret loading.

$ keydrop login

$ keydrop push

Push

Upload your existing .env file. Your secrets are securely stored and replaced with a single project key.

$ keydrop run -- npm run dev

$ keydrop run -- next build

Run

Use keydrop run for development and builds. Call init() at runtime to load secrets into process.env.

Get started