Envshed From $5/mo · Free plan 9.3 Visit dotenvx
dotenvx.com
What it is
dotenvx encrypts secrets stored in.env files, then decrypts and injects them when an application runs. Its maker describes it as free and open source, with hosted and self-hosted deployment options. Public-key encryption uses a secp256k1 key pair, keeping the private decryption key separate from the encrypted file. For development, the private key can be stored in the operating system’s secret store, including macOS Keychain, Windows Credential Manager, or Linux Secret Service. Listed workflow tools include environment selection and composition, validation, pre-commit leak prevention, Docker image protection, key/value operations, and runtime log redaction. The maker says encrypted files can travel with code and be decrypted at runtime using a private key supplied in the deployment environment, without a secrets service in the application’s critical path. Installation options include CLI, npm, winget, Homebrew, GitHub releases, Docker, a Ruby gem, and Python pip. Guides cover developer tools, programming languages, and deployment services. The free User plan includes CLI, SDKs, encryption, and GitHub Issues support. Member is $5 a month; Business is $90 a month. The paid product has a 14-day free trial.
Spec sheet
- Purpose
- Dotenvx encrypts secrets in .env files and decrypts and injects them at runtime for applications.Read 4 Oct 2026 · dotenvx.com
- Support
- The pricing table lists GitHub Issues for the free user tier, ticket support for Member and Business, and Slack support for Business.Read 4 Oct 2026 · dotenvx.com
- Headquarters
- Santa Monica, California, United StatesRead 28 Sep 2026 · dotenvx.com
- Armor access controls
- Armor lists team access without sharing private keys, human approval before decryption, software-enclave decryption, and auditing of decryptions.Read 4 Oct 2026 · dotenvx.com
- Armor trial
- The Armor FAQ states that the paid product has a 14-day free trial.Read 4 Oct 2026 · dotenvx.com
- Compliance status
- The trust page says SOC 2 Type 2 observation is in progress and a GDPR data processing agreement is in preparation.Read 4 Oct 2026 · dotenvx.com
- Deployment integrations
- Official guides cover AWS Lambda, Cloudflare, DigitalOcean, Fly, Heroku, Netlify, Railway, Render, Vercel, Docker, Docker Compose, and GitHub Actions.Read 4 Oct 2026 · dotenvx.com
- Developer integrations
- Official guides cover Claude, Codex, Cursor, 1Password, Bitwarden, Node.js, Python, Ruby, Rust, PHP, Go, Java, Kotlin, Clojure, and .NET.Read 4 Oct 2026 · dotenvx.com
- Encryption
- Dotenvx uses public-key encryption with a secp256k1 key pair, keeping the private decryption key separate from the encrypted .env file.Read 4 Oct 2026 · dotenvx.com
- Install options
- The install documentation lists CLI installation, npm, Windows winget, Homebrew, GitHub releases, Docker, Ruby gem, and Python pip.Read 4 Oct 2026 · dotenvx.com
- Intended audience
- The maker describes Dotenvx as being built for software developers and teams, including humans and coding agents.Read 4 Oct 2026 · dotenvx.com
- Key storage
- For development, the private key can be stored in the operating system’s secret store, including macOS Keychain, Windows Credential Manager, and Linux Secret Service.Read 4 Oct 2026 · dotenvx.com
- No central runtime dependency
- The maker says encrypted files travel with code and can be decrypted at runtime using a private key supplied in the deployment environment, without a secrets service in the application’s critical path.Read 4 Oct 2026 · dotenvx.com
- Open source
- The maker describes Dotenvx as free and open source.Read 4 Oct 2026 · dotenvx.com
- Workflow features
- The feature list includes environment selection and composition, validation, pre-commit leak prevention, Docker image protection, key/value operations, and runtime log redaction.Read 4 Oct 2026 · dotenvx.com
Plans and prices
Dotenvx User Free CLI · SDKs · encrypt secrets · GitHub Issues support Read 4 Oct 2026 · dotenvx.com
Member $5 a month Monthly 1 seat · unlimited keys · 250,000 included audit events · 5 days audit retention · $10/mo per additional seat Read 4 Oct 2026 · dotenvx.com
Business $90 a month Monthly 10 seats · unlimited keys · 1,000,000 included audit events · 90 days audit retention · $90/mo per additional 10 seats · Enterprise SSO listed as coming soon Read 4 Oct 2026 · dotenvx.com
Strong points and limits
Strong points
- Free and open source.
- Encrypted files can travel with code.
- Private keys can use operating system secret stores.
- Includes pre-commit leak prevention and runtime log redaction.
- Supports hosted and self-hosted deployment.
Limits
- Member plan includes one seat.
- Member audit retention is five days.
- Business plan lists Enterprise SSO as coming soon.
Who it suits
dotenvx suits software developers and teams managing application secrets, including teams working with coding agents. It offers workflows for local development and deployment, with hosted and self-hosted options.
Verdict
dotenvx centers on encrypted .env files and runtime injection, with a free plan and paid team tiers. Readers should weigh the listed seat and audit-retention limits, and note that Enterprise SSO is marked as coming soon.
Where Specifiction places it
- Secrets Management Tools#4 of 468.5
Alternatives to dotenvxAll alternatives →
Envshed From $5/mo · Free plan 9.3 Visit 
Doppler From $8/mo 8.6 Visit 
AWS Secrets Manager From $0.40/mo · Free plan 8.5 Visit