Skip to main content

Need the security model first?

Read how Ghostable handles keys, devices, and deploy tokens across all clients.

​
What an Environment Holds

An environment is a named secret set inside a project, such as development, staging, or production. Each environment keeps:
  • Encrypted variable values.
  • Per-variable version history.
  • Validation context.
  • Access decisions tied to devices and deploy tokens.
Ghostable environment view showing variables stored in a single environment in the web app.

​
Shared Behavior Across Clients

No matter which client you use, Ghostable treats environments the same way:
  • Variables are encrypted before they are stored remotely.
  • History and activity remain available without exposing plaintext.
  • Validation rules can be applied before a change is promoted.
  • New devices or identities may require a key re-share before they can decrypt.

​
Local Files vs Remote State

Ghostable is the system of record for encrypted environment state. Local .env files are working copies used for editing, export, validation, and deployment workflows. Desktop and CLI can both import from local files and export back to local files, but the remote environment remains the shared coordination point for teams.

​
Continue with Your Client

Manage environments in Desktop

Browse variables, inspect history, and import or export local files from the app.

Manage environments in CLI

Use push, pull, diff, sync, and history commands from the terminal.