Are my secret values uploaded or saved in the share link?

No. The .env content is processed entirely in your browser and is intentionally excluded from the shareable URL. Only non-sensitive options - the chosen output format and the mask toggle - are stored in the URL. Nothing you paste, including API keys and passwords, is sent to a server.

What does the validation table check for?

For each variable it flags duplicate keys (a key that appeared earlier), empty values, values that contain spaces or special characters and therefore should be quoted, lowercase keys (the convention is UPPER_SNAKE_CASE), and names that are not valid environment-variable identifiers.

How does secret masking decide what to hide?

It uses a heuristic: keys whose name suggests a secret (containing words like secret, token, key, password, auth, or credential) are masked, as are long opaque values with no spaces. Masked values keep a short readable prefix and replace the rest with asterisks. Plain values like ports or hostnames are left intact.

How does diff mode work?

Paste a base environment in column A and a comparison environment in column B. The tool parses both into key/value maps and reports keys present only in B (added), keys present only in A (removed), and keys present in both but with a different value (changed). All three lists are sorted alphabetically.

What .env syntax does the parser expect?

Standard dotenv syntax: KEY=value pairs, # comment lines, and blank lines. A comment directly above a variable is associated with it. Values may be wrapped in matching single or double quotes, which are stripped on parse and re-applied only when a value contains spaces or special characters.

Environment Variable Manager

Paste a .env file to validate it, convert it to JSON, YAML, shell exports, docker run flags, docker-compose, a Kubernetes ConfigMap, or a Netlify/Vercel list, and optionally mask secrets. Switch to diff mode to compare two environments key by key. Everything runs in your browser — your secrets never leave the page or get put in the share link.

About this ToolHow it works, benefits & use cases

Paste a .env file and the Environment Variable Manager parses it into a validated table, flagging duplicate keys, empty values, values that contain spaces or special characters and therefore need quotes, lowercase keys, and names that are not valid environment-variable identifiers. From there you can sort the file A-Z or de-duplicate it with one click, then convert it to whatever format your deployment target expects: .env, JSON, YAML, shell exports (export KEY=val), docker run flags (--env KEY=val), a docker-compose environment block, a Kubernetes ConfigMap data section, or a plain Netlify/Vercel-style list. A secret-masking toggle obscures tokens, API keys, and passwords in the preview so you can copy or screenshot the output safely. A separate diff mode lets you paste two environments and instantly see which keys were added, removed, or changed. Because .env contents are sensitive, everything runs locally in your browser, nothing is uploaded to a server, and the file is deliberately kept out of the shareable URL - only the non-sensitive output format and mask toggle are stored there.

How to Use

1Stay on the "Convert & validate" tab and paste your .env into the input panel, or click "Load Example" to try a sample file.
2Read the validated variable table: each key shows its value and any issues (duplicate, empty, needs quotes, lowercase, invalid name).
3Optionally click "Sort A-Z" or "De-duplicate" to clean up the input in place.
4Pick an output format from the dropdown - .env, JSON, YAML, shell, docker run, docker-compose, Kubernetes ConfigMap, or Netlify/Vercel list.
5Toggle "Mask secret-looking values" if you plan to copy or screenshot the result, then copy or download the output.
6Switch to the "Diff two envs" tab to paste a base and a comparison file and see added, removed, and changed keys.

Key Benefits

Validated table flags duplicates, empty values, unquoted-but-should-be values, lowercase keys, and invalid names
Eight output formats: .env, JSON, YAML, shell exports, docker run, docker-compose, Kubernetes ConfigMap, and Netlify/Vercel list
One-click sort A-Z and de-duplicate to tidy a messy file
Secret masking obscures tokens, keys, and passwords for safe copying and screenshots
Diff mode compares two environments and lists added, removed, and changed keys
Runs entirely in the browser - your secrets are never uploaded and never placed in the share URL

Common Use Cases

Converting a local .env into a Kubernetes ConfigMap or docker-compose environment block for deployment
Generating export statements to source a .env into a shell session
Catching a duplicated or lowercase key that is silently breaking app configuration
Diffing staging vs production env files to see which keys drift between environments
Producing a masked copy of a config to paste into a ticket or share in a screenshot

In-browser only. Your .env contents are kept in local state, are never uploaded, and are deliberately excluded from the shareable URL.

Environment Variables (.env)

Paste your .env file — values stay in your browser

Variables0 keys

Paste a .env above to see a validated breakdown of every variable.

Output format

Mask secret-looking values

JSON output

Copy, download, or pipe to another tool

Paste a .env to see the converted output.

Validated, then converted

Every variable is checked for duplicate keys, empty values, values that need quotes, lowercase keys, and invalid names. Sort and de-duplicate with one click, then export to the format your platform expects.

Safe for secrets

Your file is processed entirely in the browser and is kept out of the shareable URL. Toggle Mask secret-looking values to preview the output with tokens, keys, and passwords obscured before you copy or screenshot it.

Was this tool helpful?

Share Your Experience

Help others discover this tool!

Share on

Environment Variable Manager

How to Use

Key Benefits

Common Use Cases

Validated, then converted

Safe for secrets

Was this tool helpful?

Share Your Experience

Related tools

Frequently Asked Questions - Environment Manager