Stop copying configs between machines
Sync dotfiles and packages across machines using your own Git repo. No accounts, no cloud service — just your repo, your keys, your data.
Everything you need to sync your dev environment
Tether combines automatic syncing, encryption, and package management into one seamless tool.
End-to-End Encrypted
AES-256-GCM encryption with passphrase-protected keys. Your dotfiles are encrypted before syncing to Git.
Automatic Sync
Set it once, forget about it. Background daemon syncs changes across all your machines every 5 minutes.
Team Secrets
Share encrypted secrets with your team using age encryption. Map GitHub orgs to auto-share project secrets across machines.
Machine Profiles
Control which dotfiles and packages sync to each machine. Work laptop gets IDE configs, server gets shell-only.
Project Configs
Sync .env files and IDE settings across machines. Matched by Git remote URL so the same project syncs everywhere.
Package Managers
Syncs Homebrew (formulae, casks, taps), npm, pnpm, bun, gem, and uv globals. Desktop apps included.
Secret Detection
Automatically scans for API keys, tokens, and credentials before syncing. Prevents accidental leaks.
Collab Secrets
Share project secrets with GitHub collaborators using age public-key encryption. No separate secret manager needed.
Built in Rust
Single binary, no dependencies. Fast, efficient, and reliable. <10MB size, <20MB memory usage.
Interactive dashboard
Run tether to launch the TUI. Monitor files, packages, machines, and config — all from your terminal.
Simple setup, automatic sync
Three steps to synchronized bliss
Initialize
$ tether init
$ One-time setup with your private Git repository
Work Normally
# Edit configs
$ vim ~/.zshrc
# Install packages
$ brew install ripgrep
$ Make changes like you always do
Auto-Sync
# On your other machine:
$ tether status
✓ Synced automatically
✓ Everything up to date
$ Changes sync automatically across machines
No cloud. No accounts. No trust required.
Tether is a local CLI that syncs to your own private Git repo. We never see your data — there's no server, no analytics, no accounts. AES-256-GCM encryption with keys only you control.
Read full security architectureAES-256-GCM Encryption
Dotfiles encrypted before sync to Git
Passphrase Protection
Keys encrypted with passphrase, synced via Git
Secret Detection
Scans for API keys, tokens, credentials
Why Tether?
Comparing dotfile sync solutions
| Feature | Tether | mackup | chezmoi | Manual Git |
|---|---|---|---|---|
| Automatic Sync | ✓ | — | — | — |
| End-to-End Encryption | ✓ | — | ✓ | — |
| Project Configs (.env) | ✓ | — | — | — |
| Package Managers | ✓ | — | — | — |
| Secret Detection | ✓ | — | — | — |
| macOS Support | ✓ | ✓ | ✓ | ✓ |
| Linux Support | BETA | ✓ | ✓ | ✓ |
| Team Secrets | ✓ | — | — | — |
| Machine Profiles | ✓ | — | — | — |
| Collab Secrets | ✓ | — | — | — |
| Backup & Restore | ✓ | — | — | — |
| Zero Config | ✓ | ✓ | — | — |
Ready to sync?
Your repo. Your keys. No cloud service to trust. Open source and free forever.
MIT Licensed • Made by Paddo Tech