dotenvx
Hacker ApprovedRanked 9 of 20 secrets managers by recommenders
Encrypts .env files so secrets can be committed to Git safely, with the private key supplied separately; critics say it does not help with team sharing.
Encrypts .env files so secrets can be committed to Git safely, with the private key supplied separately; critics say it does not help with team sharing.
11 people gave an opinion
- recommend it
- 10
- criticize it
- 1
- approval share
- 91%
Recommended in 5 of 13 months
- November 2025: not recommended
- December 2025: recommended
- January 2026: recommended
- February 2026: recommended
- March 2026: not recommended
- April 2026: recommended
- May 2026: not recommended
- June 2026: not recommended
- July 2026: not recommended
- August 2026: recommended
- September 2026: not recommended
- October 2026: not recommended
- November 2026: not recommended (month in progress)
Why it carries the badge
- 10 people recommend itNeeds 10 or more, met.
- 10 recommenders for every criticNeeds 2 to 1 or better, met.
- Recommended in 5 of 13 monthsNeeds 4 or more, met.
The same three rules apply to every product, and the badge can’t be bought. How the badge works
What people say about it
The reasons people give, with the number of comments that give each one. Open a reason to read what they said.
Why people recommend it
Each mark is one comment
Commit encrypted .env files safely
“solves this by encrypting your .env file so you can even commit it safely”
Comment from 15 Jan 2026 in “Bubblewrap: A nimble way to prevent agents from accessing your .env files” “for committing encrypted .env files”
Comment from 8 Dec 2025 in “Show HN: Lockenv – Simple encrypted secrets storage for Git” “You keep the .env file approach, the actual secrets are encrypted”
Comment from 24 Feb 2026 in “Show HN: enveil – hide your .env secrets from prAIng eyes” Easy for existing .env users
“it builds on what's already there and makes it safer and easier to share configuration”
Comment from 18 Dec 2025 in “Stop using dotenv and switch to dotenvx today” “it's nice and easy for anyone already using `.env` files”
Comment from 8 Dec 2025 in “Show HN: Lockenv – Simple encrypted secrets storage for Git” Secrets stay safe in attacks
“So your secrets would be safe in this attack if using Dotenvx.”
Comment from 21 Apr 2026 in “A Roblox cheat and one AI tool brought down Vercel's platform” “You keep the .env file approach, the actual secrets are encrypted”
Comment from 24 Feb 2026 in “Show HN: enveil – hide your .env secrets from prAIng eyes”
What people warn about
Each mark is one comment
Doesn't help with team sharing
“solves accidental file reads but doesn't help with team sharing”
Comment from 24 Feb 2026 in “Show HN: enveil – hide your .env secrets from prAIng eyes”
Other secrets managers people recommend
The four most recommended other secrets managers, with the same counts for each, so you can compare like for like. The tick on each bar marks the 2 to 1 line the badge needs.
| Product | Recommend | Criticize | Approval | Months | Owned | Badge |
|---|---|---|---|---|---|---|
| OneCLI | 39 | 8 | 83% | 6 | — | Approved |
| SOPS | 28 | 5 | 85% | 10 | — | Approved |
| HashiCorp Vault | 26 | 10 | 72% | 10 | — | Approved |
| fnox | 20 | 4 | 83% | 9 | — | Approved |
| dotenvxThis page | 10 | 1 | 91% | 5 | — | Approved |
What people said
10 of the 12 comments that mention it, newest first. Each links to the original comment.
“lets you put encrypted secrets in an .env file and supply the private key separately”
“So your secrets would be safe in this attack if using Dotenvx.”
“It's kinda like sops but not as good.”
“solves accidental file reads but doesn't help with team sharing”
“You keep the .env file approach, the actual secrets are encrypted”
“solves this by encrypting your .env file so you can even commit it safely”
“it builds on what's already there and makes it safer and easier to share configuration”
“One key deployed to your hosts means adding new secrets doesn't take operations effort.”
“it's nice and easy for anyone already using `.env` files”
“for committing encrypted .env files”
Counts come from 1,795,640 Hacker News comments, November 2025 to November 2026. How we count. Report a mistake.