Docs

Redshift Documentation

Learn how to use Redshift for decentralized, censorship-resistant secret management built on Nostr.

What is Redshift?

Redshift is a decentralized secret manager that lets you store and manage environment variables, API keys, and other sensitive configuration without trusting a centralized service.

Built on the Nostr protocol, Redshift offers:

  • Client-side encryption - Your secrets are encrypted before leaving your device
  • No vendor lock-in - Your data is stored on open relays you control
  • Censorship resistance - No single point of failure or control
  • Familiar workflow - Doppler-compatible CLI commands

How it works

Redshift uses your Nostr identity (a public/private key pair) to:

  1. Authenticate - Prove you are who you say you are
  2. Encrypt - Secure your secrets so only you can read them
  3. Sign - Cryptographically sign your data to prevent tampering
  4. Sync - Store encrypted data on multiple Nostr relays for redundancy

When you run redshift run -- npm start, the CLI fetches your encrypted secrets from relays, decrypts them locally, and injects them as environment variables into your process.

Getting help

If you run into issues or have questions: