DiffChecker
DiffChecker / Env Drift Checker

Env and Secret Drift Checker for .env files

Paste two .env files, for example .env.example and .env.production. See which keys are missing, which values changed and which values look like real secrets, before a deploy breaks.

Private by design. Everything runs in this tab. A Content-Security-Policy on this page blocks all network requests, nothing is saved to your browser, and values are masked on screen. Open the Network tab of your developer tools to check.

What this env drift checker finds

How to use it

  1. Paste or open your reference file on the left, usually .env.example.
  2. Paste or open the file you want to check on the right, for example staging or production.
  3. Press Check drift. Use Copy report to share the result in a pull request or ticket. The report holds key names only, never values.

Frequently asked questions

Is it safe to paste my .env file here?

The comparison runs in your browser. The page has a Content-Security-Policy with connect-src 'none', so it cannot send data anywhere. It does not use cookies, localStorage or IndexedDB. For maximum caution, use test values or save the page and open it offline.

What is env drift?

Env drift is when the environment variables of two environments slowly stop matching. A variable is added in development but never added to production, or a staging value is copied to production by mistake.

How do I find missing environment variables between two files?

Put the reference file on the left and the target on the right. The first table lists every key present on the left and absent on the right.

Can it detect leaked secrets?

It flags values that match common secret formats and sensitive key names that hold a real looking value. It is a quick check, not a replacement for a full secret scanner such as gitleaks in your CI.

Does it support quotes, comments and export lines?

Yes. It handles KEY=value, export KEY=value, single and double quotes, multi-line quoted values, full line comments and trailing inline comments.

Need to compare plain text, code or any other file instead? Use the text diff checker.