dotenvx

Name: dotenvx
Brand: dotenvx

Secure dotenv for developers

softwareDevOps & CI/CDEnvironment VariablesSecurityDevelopment Tools

Visit Website

Our Verdict

Best for

Developers who want encrypted .env files that work across any language

Skip if

You already keep every secret in a hosted secrets manager and use no .env files

What is dotenvx?

dotenvx is a secure implementation of dotenv from the creator of the original library. It loads environment variables from .env files and can encrypt them with a public key, so the encrypted file is safe to commit while the private decryption key stays out of the repository. It runs as a standalone CLI, so the same workflow applies to any language or runtime rather than Node.js alone.

SpecificationsAI-estimated

deploymentDesktop App

open source✅ Yes

github stars5,645

api available✅ Yes

support optionsGitHub Issues, Community Forum

primary languageJavaScript

Key Features of dotenvx

Loads environment variables from .env files, as a drop-in replacement for dotenv

Encrypts .env files with a public key so they can be committed to the repository

Keeps the private decryption key out of the repo, separate from the encrypted values

Runs as a CLI wrapper (dotenvx run -- your-command) so any program inherits the variables

Works with any language or runtime, not only Node.js

Supports separate files per environment such as development, staging and production

Installs as a standalone binary via Homebrew, winget or curl, or as an npm package

Use Cases for dotenvx

Encrypted Secrets in Git

Run dotenvx encrypt to turn a plaintext .env into an encrypted file that is safe to commit, keeping the decryption key out of the repository.

Per-Environment Config

Keep a .env.production beside your .env and select one at runtime with the -f flag, instead of maintaining a separate config loader per environment.

Secrets in CI/CD

Install the binary in a GitHub Actions job and run dotenvx run -- node build.js, holding DOTENV_KEY as a repository secret rather than plaintext env vars.

Redacting Secrets from AI CLIs

Use dotenvx run --redact to give tools like Claude or Codex your real environment values while stripping those values back out of their output.

Pros & Cons of dotenvx

Pros

Encrypts .env files so they can be committed safely
Drop-in replacement for the original dotenv
Works with any language or runtime, not just Node.js
Installs via Homebrew, winget, curl or npm

Cons

Encrypted .env files add key management to the workflow
Requires installing the dotenvx binary or package rather than importing a single library
Newer than the original dotenv, so many project templates still assume plain .env files

Frequently Asked Questions

Is dotenvx compatible with dotenv?

Yes, dotenvx is designed to be a drop-in replacement for dotenv.

Does dotenvx support encryption of sensitive data?

Yes. dotenvx encrypts .env files with a public key, so the encrypted file can be committed while the private key stays outside the repository.

Can I use dotenvx with languages other than Node.js?

Yes. dotenvx runs your program as a subprocess, so it works with any language or runtime, including Python, Go, Ruby and PHP.

Is dotenvx free?

Yes, dotenvx is free and open source.

Pricing Overview

View full pricing →

Free

Detailed plans are not listed. Visit the official website for pricing information.

Reviews & Ratings0.0

Write a Review See all reviews →

No reviews yet. Be the first to write one!

Top Alternatives & Similar Tools

View all alternatives & similar tools →

infisical

AI-suggested

Infisical is an open-source platform designed to manage secrets, certificates, and privileged access. It provides a secure and scalable solution for organizations to handle sensitive data and access credentials. With Infisical, users can store, manage, and rotate secrets, certificates, and access credentials in a centralized and secure manner.

Compare with dotenvx