We use cookies to understand how the site is used and to display ads. Analytics and advertising only run after you accept. You can change your choice anytime. Privacy policy

Skip to content
devvkit

devvkit / dev

.env File Validator

Lint .env files: syntax, duplicates, secrets, and clean exports.

0 variables0 errors0 warnings
Input
No issues: file looks clean.
Cleaned export

Checks syntax (KEY=VALUE, quotes, inline comments), duplicate keys, and common secret patterns (AWS keys, GitHub tokens, OpenAI keys, PEM blocks, and *PASSWORD/*SECRET/*TOKEN key names). Secret detection is heuristic: verify before acting. All analysis runs locally.

share this tool

related tools

Password Strength Checker
Score passwords with zxcvbn and check for known breaches via HIBP.
Docker Compose Validator
Validate docker-compose.yml: syntax, services, ports, volumes, networks.
Dockerfile Linter
Lint Dockerfiles for best practices: layers, caching, security, size.

Lint .env files for syntax errors, duplicate keys, unquoted values, and accidental secrets. Export a cleaned .env with duplicates resolved and sensitive values filtered out.

>[x]Features
  • -KEY=VALUE syntax checks with line numbers
  • -Duplicate key detection
  • -Quote and inline-comment warnings
  • -Heuristic secret detection (AWS keys, tokens, PEM blocks)
  • -Cleaned export for .env.example
  • -Runs entirely locally
>>Use Cases
  • >Auditing env files before committing to a repo
  • >Generating a safe .env.example from a real .env
  • >Catching duplicate keys that silently override
  • >Teaching dotenv quoting rules

Frequently Asked Questions

>Are my secrets safe??
Yes. All analysis is local: nothing is uploaded. Secret detection runs on patterns in your own browser.
>What counts as a secret pattern??
Key names containing PASSWORD, SECRET, TOKEN, KEY or similar, plus known formats like AWS access keys, GitHub tokens, and OpenAI keys. It is heuristic: always verify before acting.
>What does the clean export do??
It strips duplicate keys (first wins), re-quotes values that need quotes, and optionally removes detected secrets: handy for generating a .env.example.