How are secrets detected?

Keys containing words like secret, token, key, or password are treated as secrets.

What happens with duplicate keys?

They're flagged in a warning banner and the last occurrence is used in the output.

Are quoted values handled?

Yes, surrounding single or double quotes are stripped automatically.

Env File Parser

Convert .env files to JSON, YAML, or shell exports.

Works Offline

Privacy First

No Login

No API

Output format

Mask secret-looking values

Keys

Duplicate keys

.env input

Converted output

{
  "DATABASE_URL": "postgres://localhost/db",
  "API_SECRET_KEY": "s3********ue",
  "DEBUG": "true"
}

About the Env File Parser

Parse .env files and convert them to JSON, YAML, or shell export statements. Detects duplicate keys and optionally masks values that look like secrets.

Examples

Simple env

PORT=3000

Output

{
  "PORT": "3000"
}

Related tools

.htaccess Redirect Generator

Dev Utilities

Generate Apache .htaccess redirect and rewrite rules.

Chmod Calculator

Dev Utilities

Unix permission calculator: checkboxes, octal, and symbolic.

Code Comment Stripper

Dev Utilities

Remove comments from JS, HTML, Python, or SQL source.

Code Diff Merger

Dev Utilities

Side-by-side line diff of two code snippets with stats.

Cron Expression Builder

Dev Utilities

Build cron expressions visually with a human-readable description.

cURL to Fetch Converter

Dev Utilities

Convert a curl command into JavaScript fetch() code.

Frequently asked questions

Version 1.0.0 · Updated 2026-08-06 · Runs entirely in your browser