The workaround is everywhere. A developer needs to unblock a teammate. The fastest path is to copy the .env file, paste it into Slack or a DM, and hit send. The file sits there. Nobody deletes it. The credentials stay in the message history indefinitely.
Fora built JustEnv around that specific failure mode. Not as a rebuke to existing secrets managers, but as a tool for the gap they leave open - the moment when someone just needs to hand off credentials quickly and the only available option is a Slack message that was never meant to be permanent.
JustEnv is a native Mac application. It encrypts a .env file on-device before anything leaves the machine - Fora never sees the plaintext. The encrypted file is shared via a link that either expires after a set time or burns after a single open. The person receiving it needs no account. There is nothing to install.
Lightweight by Design
Most secrets management platforms approach the problem from the top down. They require a CLI, accounts, sync engines, and often infrastructure to maintain. That overhead makes sense at scale. It creates friction for the solo developer or small team who needs to share credentials to unblock a build and has no interest in standing up a platform to do it.
JustEnv sits at a different level. It handles prod, staging, and preview environments separately. The workflow is close to a secure paste: open the app, load the file, generate a link, send it. The recipient opens it once and the link is gone.
Fora describes the target user as someone who shares environment variables regularly enough that the Slack workaround has started to feel wrong - but whose team is not large enough to justify a full secrets management deployment. The app is currently in beta.