better-env is a CLI tool that manages environment variables securely using OpenPGP encryption. Store secrets once in a global encrypted store, link them to projects via commit-safe .better-env files, and load them at runtime, no plaintext to be found anywhere.