.env Parser & Converter
Parses a .env file and converts it to JSON, YAML, shell exports, Docker or Kubernetes formats.
Reads a `.env` file the way `dotenv` does — quoting rules, `export` prefixes, `${VAR}` interpolation — and re-emits it as JSON, YAML, shell exports, a Compose `environment:` block, a Kubernetes ConfigMap or Secret, or a tidied `.env`.
A flat object. What most config loaders and CI secret importers take.
.env in
Drop a .env file
Read in this tab. Nothing is uploaded, and nothing is stored.
`export` is accepted and ignored. Single quotes are literal; double quotes expand `\n` and can span lines; an unquoted value ends at a space followed by `#`.
JSON
Variables
8
Lines read
8
Interpolated
1
How to use it
Paste or drop the .env
Read in this tab; nothing is uploaded and nothing is stored. Comments, blank lines and `export` prefixes are all understood.
Pick the target format
The note under the picker says what each one is for. ConfigMap and Secret ask for a resource name and namespace as well.
Check the duplicates and the unreadable lines
A key assigned twice is reported by name — the last assignment wins here as it does in `dotenv`, but not every loader agrees. Lines that could not be parsed are listed with their number.
Mask before you screenshot
The mask toggle blanks values whose key looks like a secret. It matches on the name, so treat it as a courtesy rather than a guarantee.
Common questions
Why is `p@ss$word#x` not truncated at the `#`?
Because it is inside single quotes, where nothing is special. In an unquoted value a comment starts at a space followed by `#`, so `abc#def` keeps the hash but `abc #def` does not. Double quotes expand `\n` and `${VAR}`; single quotes expand nothing.
Does interpolation reach my shell environment?
No. `${VAR}` resolves against earlier lines of the same file only — this page has no access to your environment and would not read it if it could. A reference to something not defined above it stays as written.
Is the Secret output safe to commit?
No. A Kubernetes Secret stores Base64, which is an encoding, not encryption — anyone who can read the file can read the values in one command. Sealed Secrets, SOPS or an external secret store are what make it safe to commit.
What happens to a multi-line value?
A double-quoted value may span lines and is read as one value — which is how a PEM private key ends up in a `.env`. It survives into JSON and YAML intact; in the shell and docker outputs it is single-quoted, which keeps the newlines literal.
Feed it from
chmod Calculator
Converts between octal, symbolic and checkbox permission views, including setuid and sticky bits.
docker run to Compose
Turns a docker run command line into a compose service definition, and converts back the other way.
Kubernetes Secret Decoder
Decodes every Base64 value in a Secret manifest, and re-encodes an edited one ready to apply.
.gitignore Generator
Builds a .gitignore by combining language, framework and editor templates, with duplicates merged.
Next
These accept what this tool produces, so the result can go straight in.
docker run to Compose
Turns a docker run command line into a compose service definition, and converts back the other way.
Kubernetes Secret Decoder
Decodes every Base64 value in a Secret manifest, and re-encodes an edited one ready to apply.
Secret Scanner
Scans pasted code, logs or a config dump for API keys, tokens and private keys, with entropy heuristics.
YAML Formatter & Validator
Re-indents YAML consistently, validates it, and flags the tab and anchor mistakes that break parsers.
Base64 Encoder & Decoder
Encodes and decodes Base64 and Base64URL for text or files, handling UTF-8 correctly.
curl to Code
Converts a curl command into fetch, axios, Python requests, Go, PHP or PowerShell.