Armoring

Armoring stores private decryption keys remotely as armored keys instead of writing them locally to .env.keys.

Use Armor to move an existing private key off device.

$ dotenvx armor up

Pull an armored key back into .env.keys when a local workflow needs it.

$ dotenvx armor down

Push and pull are also available for syncing armored keys with .env.keys.

$ dotenvx armor push
$ dotenvx armor pull

See the Armor CLI reference for the full command set.