Features
A secure dotenv—with encryption, redaction, and the workflow extras.
- Make .env safe to commit
- Password protect your .env file
- Store keys in your OS keychain
- Same on Mac, Linux, and Windows
- Ship the right secrets to each environment
- Compose multiple .env files
- Runtime leak protection and log redaction
- Catch missing keys before you run
- Protect your team from secret leaks
- Keep .env out of Docker images
- Give .env live, computed values
- Support multi-line secrets
- Read and write single keys
- Delete keys cleanly
- Decrypt when you need plaintext
- Generate a .env.example
- Append .env to .gitignore
- Get help when something goes wrong
- Debug what dotenvx is doing
- Follow Next.js env conventions
- Pull secrets remotely from places like 1Password
- Pull secrets remotely from Bitwarden
- Runtime leak protection with Claude
- Runtime leak protection with Cursor
- Runtime leak protection with Codex
- and more