SecretStash vs. dotenv-vault
By Doug Niccum, founder of SecretStash
SecretStash and dotenv-vault both encrypt your .env files and sync them through a CLI, so the real difference is billing. SecretStash is a flat $10/month for up to 20 users; dotenv-vault charges per seat, which is $240/month for twenty people on its Team plan. A true solo developer pays less on dotenv-vault's $8 Solo plan.
| Feature | SecretStash | dotenv-vault |
|---|---|---|
| Pricing model | Flat rate per organization tier | Per-seat, billed per user/month |
| Users on entry-level paid plan | Up to 20 users on Team ($10/mo flat) | Up to 2 users on Solo ($8/mo/user) |
| CLI workflow | CLI-first pull/push | CLI-first pull/push (very similar model) |
| Client-side encryption | Zero-knowledge, AES-256-GCM | Encrypted .env sync |
| Access controls | Roles and per-application access on Organization ($40/mo flat) | Included on Team tier |
| Ecosystem integrations | Laravel/Composer, npm, GitHub, CI/CD | GitHub Action, VS Code extension, CLI |
Pricing at a glance
- dotenv-vault Solo: $8/month per user, capped at 2 users.
- dotenv-vault Team: $12/month per user, unlimited teammates.
- SecretStash Team: a flat $10/month (or $100/year) for up to 20 users — no per-seat multiplication once you have more than one paid user.
- SecretStash Organization: a flat $40/month (or $400/year) for unlimited users.
How much does each cost as your team grows?
Monthly cost at common team sizes, using the list prices above.
| Team size | SecretStash | dotenv-vault |
|---|---|---|
| 2 users | $10/month (Team) | $16/month (Solo, $8/user) |
| 5 users | $10/month (Team) | $60/month (Team, $12/user) |
| 10 users | $10/month (Team) | $120/month (Team, $12/user) |
| 20 users | $10/month (Team) | $240/month (Team, $12/user) |
A true solo developer pays $8/month on dotenv-vault's Solo plan, less than SecretStash's $10 Team plan.
Which one fits your team?
Choose SecretStash if…
You're a team of 2-20 people and want flat pricing instead of per-seat billing — SecretStash's Team plan is cheaper than dotenv-vault the moment you add a second paid user.
Choose dotenv-vault if…
You're a true solo developer, or you specifically want dotenv.org's existing ecosystem (their VS Code extension and GitHub Action) and don't mind per-seat billing.
How do you switch from dotenv-vault to SecretStash?
Because both tools work from .env files and a CLI, switching is mostly a matter of pulling your current files and pushing them into SecretStash.
- Pull each environment from dotenv-vault into a local .env file (for example .env.staging and .env.production) with their CLI.
- Create an account at secretstash.cloud. New organizations start with a 14-day trial. In the dashboard, click "New application" and create one environment per file you exported (for example, local, staging, production).
- In your Laravel app, run
composer require dniccum/secret-stash-cli, thenphp artisan secret-stash:loginto authorize the CLI in your browser. SetSECRET_STASH_APPLICATION_IDin your.envto the ID shown for your application. - Run
php artisan secret-stash:install. This creates the key that encrypts your values on your machine. It lives in~/.secret-stash/device_private_key.pem, so keep that directory safe. - Push each exported file into its environment, for example
php artisan secret-stash:variables push --environment=production --file=.env.production. Values are encrypted before they leave your machine. - Invite teammates to your organization from the dashboard. Each one installs the CLI, runs
php artisan secret-stash:login, and runsphp artisan secret-stash:keys initonce on their machine. - Sharing works one environment at a time. Run
php artisan secret-stash:share --environment=productionfor each environment (staging, local, and so on), then teammates pull withphp artisan secret-stash:variables pull --environment=production. - Delete the plaintext export files once everything is pushed, so they don't end up in Slack or Git later.
What doesn't SecretStash do yet?
Check these before you switch. If one is a hard requirement, dotenv-vault may be the better fit today.
- Not SOC 2 certified.
- Self-serve plans top out at 20 users.
Common questions about dotenv-vault
Sources
dotenv-vault pricing verified against dotenv.org/pricing. Figures current as of September 2026 and subject to change.