# git-crypt

8 Hacker News commenters recommended git-crypt and 1 criticized it, November 2025 to November 2026. It was recommended in 4 of 13 months.

**Verdict:** Recommended for transparent encryption of chosen files in a Git repo, decrypted automatically with a working key. Critics say it assumes a single identity and handles access control poorly.

## Why people recommend it

- Easy setup, integrates well with Git (2 comments): "which is transparent (you put the patterns you want to encrypt in .gitattributes)" ([source](https://news.ycombinator.com/item?id=46192359)) "It's very easy to set up and integrates nicely into git." ([source](https://news.ycombinator.com/item?id=47548785))
- Encrypts files in repos, decrypts with key (2 comments): "You can have encrypted in a repo that will be auto decrypted if you have a working key." ([source](https://news.ycombinator.com/item?id=48571996)) "I use git-crypt to encrypt the inputs in my public repo" ([source](https://news.ycombinator.com/item?id=46097129))

## What people warn about

- Assumes a single human identity (2 comments): "The existing tools (pass, sops, git-crypt) are close but they assume a single human identity." ([source](https://news.ycombinator.com/item?id=47206838)) "it's less good at RBAC because there's no real "identity" component at read-time" ([source](https://news.ycombinator.com/item?id=48572548))
- Weak at role-based access control (1 comments): "it's less good at RBAC because there's no real "identity" component at read-time" ([source](https://news.ycombinator.com/item?id=48572548))
- Only suits local-only access needs (1 comments): "git-crypt only makes sense because I only need access to the private posts locally" ([source](https://news.ycombinator.com/item?id=47402979))

## Alternatives hackers recommend

- [fnox](https://hackerapproved.com/p/fnox.md): 20 recommend
- [Infisical](https://hackerapproved.com/p/infisical.md): 17 recommend
- [enveil](https://hackerapproved.com/p/enveil.md): 13 recommend
- [dotenvx](https://hackerapproved.com/p/dotenvx.md): 10 recommend
- [Varlock](https://hackerapproved.com/p/varlock.md): 8 recommend

## Cite as

Hacker Approved, "git-crypt", https://hackerapproved.com/p/git-crypt/ (counts from 1,795,640 Hacker News comments, November 2025 to November 2026).