Files and built-in tools
Slinky vs dotenvx
dotenvx, from the author of dotenv, encrypts each value in a .env file so the file can live in your repository. The private key that opens it still has to live somewhere. Slinky keeps variables out of the repository altogether, and can also hold that private key.
Choose dotenvx if
- You want encrypted variables to travel with the repository, to every machine and CI.
- You work on Linux or Windows too.
- Your team already shares one private key per environment.
Choose Slinky if
- You’d rather nothing secret was in the repository, even encrypted.
- You want Touch ID before a command gets your keys.
- You want AI agents to see names only.
- You also keep backup codes and recovery keys.
Side by side
| Slinky | dotenvx | |
|---|---|---|
| Made for API keys and tokens | Yes | Yes |
| A project’s .env, per environment | Yes | Yes |
| Starts your app with its variables | Yes: slinky run | Yes: dotenvx run |
| AI agents see names, not values | Yes | Partly: Hides values in logs |
| Backup codes that cross themselves off | Yes | No |
| Where your secrets are kept | An encrypted file on your Mac | An encrypted .env, with the key kept separately |
| Works without an account | Yes | Yes |
| Share with your team | Yes: Encrypted files, no server | Partly: One private key per environment |
| Opens with Touch ID | Yes | No |
| Open source | Yes: MIT | Yes: BSD-3 |
| Price | Free | Free, with paid plans for teams |
| Runs on | Mac, Apple silicon | Any computer |
Yes Partly No As of October 2026, from dotenvx.com. Features and prices change.
Questions
Can I use dotenvx and Slinky together?
Yes. Keep DOTENV_PRIVATE_KEY in Slinky instead of a .env.keys file, and run slinky run --key DOTENV_PRIVATE_KEY -- dotenvx run -- npm start. Touch ID unlocks the key for that one command.
Does dotenvx keep values from AI agents?
It hides values in output, so logs show [REDACTED], but a process it starts still gets the real values. Slinky’s agents see names only and need your Touch ID for each command; live keys are held back.
Is Slinky free?
Yes. Slinky is free and open source under the MIT License, made by Testament Made, LLC. It runs on Apple silicon Macs with macOS 15 Sequoia or later.
More comparisons
Slinky vs .env files
Plain text in the project folder, or encrypted and out of it.
Slinky vs direnv
Variables that load when you cd, from a plain file or an encrypted vault.
Slinky vs Keychain Access
The Mac’s built-in keychain, or an app made for keys.
Slinky vs 1Password
A full password manager with developer tools, or a free Mac app just for keys.
Slinky vs Apple Passwords
Use Apple Passwords for sign-ins, and Slinky for keys and backup codes.
Slinky vs Bitwarden
An open-source password manager and a Secrets Manager for teams, or one Mac app.
All comparisons
Every tool side by side, in one table.