Armoring

Learn how armored keys keep private decryption keys off device.

Armoring stores private decryption keys remotely as armored keys instead of writing them locally to .env.keys.

Use Armor to move an existing private key off device.

$ dotenvx-armor up

Pull an armored key back into .env.keys when a local workflow needs it.

$ dotenvx-armor down

Push and pull are also available for syncing armored keys with .env.keys.

$ dotenvx-armor push
$ dotenvx-armor pull