Tool Open source
dotenvx is an open-source, cross-platform successor to dotenv that loads variables from one or more dotenv files and injects them into a command or application at runtime. Its CLI can run programs in different languages, select environment-file conventions, expand variables and command substitutions, apply defaults and precedence rules, and expose values through commands such as get, set, encrypt, decrypt, validate, and genexample; a Node.js package also provides config(), parse(), set(), and get() APIs.
It encrypts dotenv values using public-key cryptography, stores the corresponding private keys separately, and decrypts values when they are accessed or injected. It supports environment-specific files, monorepo paths, plaintext exceptions, validation against .env.example, and integrations that resolve 1Password or Bitwarden references. The run --redact option replaces declared secret values in a command's stdout and stderr with [REDACTED], while masking controls provide partial or complete masking.
The project is distributed as a global CLI, npm package, shell-installed binary, Homebrew package, Docker image, GitHub release, and Windows winget package. Its repository is maintained by the creator of dotenv and lists dotenvx Armor, native OS secret stores, local key locking, and pre-commit or pre-build checks as additional key-management and source-control features.
1 use taken from transcripts — each links to the moment in the video.
An open-source cross-platform successor to dotenv. It injects variables from dotenv files into processes, encrypts environment files with public-key cryptography, supports multiple environments, validates configuration, and redacts secrets from command output.
1 in the library.