dotenvx

Encrypts and decrypts .env files using AES-256 and keypair-based protection.

Updated Mar 2, 2019

Search Tags:#encryption #secrets #environment-variables #env #keypair #dotenvx #secure-run

Ready to run

npx skills add https://github.com/trmaphi/dotfiles --skill dotenvx

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: dotenvx
Source: https://github.com/trmaphi/dotfiles/tree/main/.claude/skills/dotenvx
Command: npx skills add https://github.com/trmaphi/dotfiles --skill dotenvx

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Manage and protect environment variables by encrypting .env files and handling private keys to prevent plaintext exposure, enabling safe development and deployment workflows.

Core Features & Use Cases

Encrypt/decrypt .env files with AES-256 + keypair-based protection; plaintext values are never committed.
Load and inject environment variables for running commands, with support for multiple sources and explicit precedence.
Rotate keys and manage private keys locally via a simple CLI interface for secure long-term operations.

Quick Start

Load your encrypted environment variables and run a command with automatic decryption.

Frequently Asked Questions about dotenvx

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I encrypt environment variables in my .env files?▼

Encrypt environment variables by applying AES-256 encryption and keypair-based protection to .env files, ensuring plaintext values are never committed. This prevents secret exposure during local development and deployment workflows.

What is the best way to manage secrets in CI/CD pipelines?▼

Managing secrets in CI/CD pipelines involves loading encrypted .env files and injecting decrypted environment variables at runtime via cryptographic key management. This approach supports multi-environment configurations with explicit precedence.

Do I need a private key to decrypt environment variables?▼

Yes, decrypting environment variables requires a private key managed via DOTENV_PRIVATE_KEY or a local .env.keys file. This keypair-based mechanism protects secrets and enables safe long-term operations like key rotation.

Can I rotate cryptographic keys for encrypted environment files?▼

Yes, you can rotate keys and manage private keys locally via a simple CLI interface. This supports secure long-term operations and maintains continuous protection for your encrypted environment variables.

Why should I encrypt .env files instead of committing plaintext secrets?▼

Encrypting .env files prevents plaintext exposure of secrets in development and deployment pipelines. It ensures sensitive values are protected by AES-256 encryption and keypair-based mechanisms, enabling safe repository commits.

Does dotenvx work with multiple environment configurations?▼

Yes, dotenvx supports multi-environment configurations by loading and injecting environment variables from multiple sources with explicit precedence. It handles decryption automatically for local development and CI/CD pipelines.