Sharing sensitive information like database passwords in plaintext risks security breaches. Developers often paste credentials into chat applications or accidentally commit them to public repositories. Plain text .env files are unencrypted on disk and prone to accidental Git leaks. Disorganized sharing methods create an un-auditable trail of potential secret leaks. EnvVault is a new Node.js CLI tool designed to address these security flaws. It encrypts project secrets locally using AES-256-GCM and injects them directly into process memory. This process memory injection ensures plaintext secrets never touch the hard drive. EnvVault is offline-first, requires no external tokens, and includes a Git leak auditor. Installation involves a simple npm command, followed by initialization and storing secrets. The tool can also export secrets for CI/CD pipelines. EnvVault uses Node's native crypto engine for its cryptographic operations.