Do I need PHP installed to use encrypted env files?

No. Dotvault implements Laravel’s AES-256-CBC and AES-128-CBC encryption natively in Node.js — no PHP, no artisan, nothing extra to install.