# SOPS

28 Hacker News commenters recommended SOPS and 5 criticized it, November 2025 to November 2026. It was recommended in 10 of 13 months. It meets the Hacker Approved badge rule.

**Verdict:** Encrypts secret files such as .env so they can live in Git or be read only when needed; people praise its simplicity, especially with age. Common caveat: it doesn't solve team sharing.

## Why people recommend it

- Pairs well with age encryption (5 comments): "sops combined with age is great! Benefit is that it doesn't tie you into 1Password's ecosystem" ([source](https://news.ycombinator.com/item?id=48105891)) "cheapest effective setup ive found: sops+age for the .env" ([source](https://news.ycombinator.com/item?id=47142921)) "use sops + age or dotenvx to encrypt just the values" ([source](https://news.ycombinator.com/item?id=47137514))
- Simple and easy to use (4 comments): "sOps is so much cleaner, easy enough to use and works well enough in k8s." ([source](https://news.ycombinator.com/item?id=49486914)) "I like it because it's pretty easy to use, however it's not fool-proof" ([source](https://news.ycombinator.com/item?id=46674263)) "SOPS with Age is simple, and simple is good." ([source](https://news.ycombinator.com/item?id=47355452))
- Keeps plaintext secrets off disk (3 comments): "switch to SOPS or Vault or whatever to keep these out if plaintext except exactly when needed" ([source](https://news.ycombinator.com/item?id=48193806)) "I like this because this way the .env doesn't sit in the directory at all" ([source](https://news.ycombinator.com/item?id=49757541)) "so no secrets live on disk" ([source](https://news.ycombinator.com/item?id=48014461))
- Mature and used for years (3 comments): "I've used it with ease for the last two years, both personally and professionally." ([source](https://news.ycombinator.com/item?id=47356976)) "compared to something mature like SOPS" ([source](https://news.ycombinator.com/item?id=47385543)) "This software has done this for years" ([source](https://news.ycombinator.com/item?id=47133711))

## What people warn about

- Weak for team sharing (2 comments): "solves accidental file reads but doesn't help with team sharing" ([source](https://news.ycombinator.com/item?id=47138932)) "The existing tools (pass, sops, git-crypt) are close but they assume a single human identity." ([source](https://news.ycombinator.com/item?id=47206838))
- Complicated, clunky user experience (2 comments): "SOPS is ultra-complicated for a security tool." ([source](https://news.ycombinator.com/item?id=47355521)) "But SOPS UX feels clunky." ([source](https://news.ycombinator.com/item?id=49317859))

## Alternatives hackers recommend

- [OneCLI](https://hackerapproved.com/p/onecli.md): 39 recommend
- [HashiCorp Vault](https://hackerapproved.com/p/hashicorp-vault.md): 26 recommend
- [Agent Vault](https://hackerapproved.com/p/agent-vault.md): 20 recommend
- [Kloak](https://hackerapproved.com/p/kloak.md): 13 recommend
- [AWS Secrets Manager](https://hackerapproved.com/p/aws-secrets-manager.md): 8 recommend

## Cite as

Hacker Approved, "SOPS", https://hackerapproved.com/p/sops/ (counts from 1,795,640 Hacker News comments, November 2025 to November 2026).