Skip to content
Run here 100% in your browser, no upload, no login

.env Editor

Edit .env files as a table: add keys, keep comments, convert to JSON and mask secrets.

Key · Value · Comment

No rows yet — paste .env content above and press Parse.

Masking only changes what is displayed — the real values stay in memory and are still exported.

How to use it

  1. Paste .env content into the input box and press Parse. Keys and values appear as editable rows, comment lines stay as comment rows.
  2. Pick a mode: .env to JSON for config review, .env to .env to apply your edits, or JSON to .env to go the other way.
  3. Use Add row and Add comment to extend the file; the trash button on each row removes it.
  4. Press Mask values before sharing your screen — the dots replace what is displayed, not what is stored.
  5. Copy the output, or download it as .env or env.json.

Quoting is handled both ways: double quotes may contain \n, \t and escaped quotes, single quotes are literal, and an unquoted value ends at an inline # comment.

Common use cases

Why it stays private

Parsing and exporting happen in browser memory. Tokens, database URLs and API keys never leave your device, which is the whole point of editing secrets in a local tool.

FAQ

Q: Does masking remove the real values? A: No. Masking only changes what is displayed, and the value inputs become read-only while masked. The real values are still exported, so unmask before you edit a value.

Q: What happens to comment lines and blank lines? A: Comment lines are preserved and editable, and blank lines are kept as spacers so the section layout of your file survives a round trip.

Q: Are nested JSON values supported? A: In JSON to .env mode, non-string values are written as their JSON text, since .env files hold strings only. Flatten nested objects first if you want one key per field.

Your data stays on this device

.env Editor runs 100% locally. Everything you paste or drop is processed by your own browser and never transmitted. Nothing is stored on our servers — close the tab and it is gone.

Nothing you type is sent to a server, logged, or used for analytics. The page works even with your network disconnected after first load.