# fnox

20 Hacker News commenters recommended fnox and 4 criticized it, November 2025 to November 2026. It was recommended in 9 of 13 months. It meets the Hacker Approved badge rule.

**Verdict:** A command-line tool that gives one interface to secrets stored in OS keychains, age, and cloud or local vaults, keeping them out of environment files. Its main caveat is that the master password is awkward when set in an environment variable.

## Why people recommend it

- Unified access to many secret backends (4 comments): "Ohh fnox looks really cool, with encryption being one possible provider but something like Vault being another." ([source](https://news.ycombinator.com/item?id=48295323)) "The problem fnox solves is great, unified access to secrets across dev, CI, prod with cloud backends." ([source](https://news.ycombinator.com/item?id=47718073)) "supports age as well as multiple cloud or local options behind one unified interface" ([source](https://news.ycombinator.com/item?id=48676039))
- Supports age, keychain and cloud stores (3 comments): "especially because you can tell it to fetch some secrets from the user's laptop's OS keychain" ([source](https://news.ycombinator.com/item?id=49125562)) "supports age as well as multiple cloud or local options behind one unified interface" ([source](https://news.ycombinator.com/item?id=48676039)) "because of the flexibility and support for external storage" ([source](https://news.ycombinator.com/item?id=46192702))
- Default tool for new projects (2 comments): "pretty much default for any project I start nowadays" ([source](https://news.ycombinator.com/item?id=48292215)) "I basically just use fnox everywhere" ([source](https://news.ycombinator.com/item?id=47747421))
- Well-made and reliable tool (2 comments): "Awesome, both fnox and hk look very well-made." ([source](https://news.ycombinator.com/item?id=48292951)) "Pretty happy about these tools." ([source](https://news.ycombinator.com/item?id=49171253))

## What people warn about

- Seen as vibe coded or derivative (2 comments): "started in October 2025, does not have any issues (at all) and is completely vibe coded" ([source](https://news.ycombinator.com/item?id=47385543)) "fnox is mostly a copy of secretspec" ([source](https://news.ycombinator.com/item?id=49125649))
- Relies on encryption provider setup (2 comments): "This is only true if you use the encryption providers." ([source](https://news.ycombinator.com/item?id=48024902)) "However you have a dependency of encryption/decryption." ([source](https://news.ycombinator.com/item?id=48024779))

## Alternatives hackers recommend

- [Infisical](https://hackerapproved.com/p/infisical.md): 17 recommend
- [enveil](https://hackerapproved.com/p/enveil.md): 13 recommend
- [dotenvx](https://hackerapproved.com/p/dotenvx.md): 10 recommend
- [Varlock](https://hackerapproved.com/p/varlock.md): 8 recommend
- [git-crypt](https://hackerapproved.com/p/git-crypt.md): 8 recommend

## Cite as

Hacker Approved, "fnox", https://hackerapproved.com/p/fnox/ (counts from 1,795,640 Hacker News comments, November 2025 to November 2026).