Security and disclosure

Env Vault encrypts locally with age. The public tool accepts variable names only. No credential upload, account token store or AI call is part of this module.

Report an issue

Contact security@eliteaiempire.com. Use a synthetic example and omit secret values. We follow a 90-day coordinated disclosure period. Version 0.1.x is supported.

Inspect the boundary

Read the threat model. A process with access to your private key can decrypt your files. The child command can read, print or transmit its environment.