Redaction

Keep secret values out of terminal output.

Usage

redacted: true is the default. Your app receives the real value while terminal output shows [REDACTED]. Use redacted: false for values that may be visible. redact is an alias.

env "DATABASE_URL", redacted: true
env "PORT", type: "port", encrypted: false, redacted: false

Encryption and redaction are independent rules. Allowing visible output does not permit plaintext storage. A redaction requirement from any active file policy takes precedence over an allowance to display a value.

Envfile Quickstart
Full Envfile Spec