Reference
Limits and FAQ
Free plan limits and common questions.
Limits
envpass is free. These limits keep it fast for everyone:
| Resource | Limit |
|---|---|
| Workspaces you own | 3 |
| Projects per workspace | 10 |
| Environments per workspace | 10 |
| Members per workspace | 25 |
| Service tokens per workspace | 50 |
| Services per project | 20 |
| Keys per project | 500 |
| Value size | 32 KB |
| API requests | 300 per minute per token (30 resolves) |
| Share links | 20 per user per day |
| Invitations | 20 per workspace per day |
Current usage is shown under Usage in each workspace. Hitting a limit returns HTTP 403 with code limit_reached and the limit's name.
FAQ
Can envpass read my secrets?
Values are encrypted at rest and decrypted on the server only to answer a request from someone with access. That is what lets CI and your team pull them. Share links are encrypted in the browser and the server never has their key. See Security.
Can I export everything?
Yes. Export any environment as .env, JSON or shell exports from the app, the CLI (envpass pull) or the API.
How do I rotate a value?
Write the new value. The old one stays in the version history, and you can restore it if the rotation breaks something.
What happens when someone leaves?
Remove them under Members. Their access and the service tokens they created stop working immediately, and the audit log shows what they accessed.
Is there a CLI?
Yes: bunx envpass-cli, npx envpass-cli or uvx envpass-cli. See CLI.