ConfigShield — Config File Encryption

ConfigShield — Config File Encryption, ship config files without shipping your secrets. ConfigShield encrypts sensitive values in .env, JSON, YAML, and INI files automatically — detecting passwords, API keys, tokens, and credentials by pattern. Decrypt at runtime with a key. Rotate keys without downtime.

Includes a scan mode that audits your configs for exposed secrets without changing anything. Integrity verification catches corruption or wrong-key attempts. Works with any config format your stack uses.

Single Python file. Zero dependencies. Python 3.8+. 100% local execution.