dotenvx review
A focused open-source option for encrypting, injecting, and managing .env secrets.
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
dotenvx is an open-source secrets management tool for developers and teams that want to encrypt values in .env files, commit those files with application code, and decrypt secrets at runtime. Its CLI runs on Windows, macOS, and Linux, while SDK usage supports multiple programming languages. The product also supports multiple environments, environment-file selection, runtime leak protection, and log redaction. The free core product is local, while dotenvx Armor adds hosted key management, team access, audit logs, API control, approvals, and rotation workflows.
The published plans show a freemium model with a 14-day free trial. Solo costs $5 per month for 1 user, 25,000 included audit events, 5-day audit retention, and manual key rotation. Team costs $20 per month for 3 users, 250,000 included audit events, 30-day retention, and command-based key rotation. Business costs $90 per month for 10 users, 1,000,000 included audit events, 90-day retention, and command-based rotation. Source Pre-release costs $990 one-time with annual billing and includes a pre-release source package. These tiers make hosted administration available at several team sizes, while the free core keeps local encrypted-file workflows accessible.
Integration support centers on application deployment and developer workflows rather than a broad infrastructure platform. dotenvx integrates with GitHub Actions, 1Password, Bitwarden, Docker, Vercel, Cloudflare Workers, and Heroku, and supports API access alongside CLI and SDK usage. Armor records activity and secret-management audit events and adds centralized team administration. Choose dotenvx when encrypted .env files, runtime injection, CI/CD workflows, and rotation are the main requirements. Teams needing a wider deployment or integration scope should consider a broader vault product instead.
dotenvx pros and cons
- Where it wins
- Encrypts committed .env files with public-key cryptography
- Injects secrets at runtime with leak protection and log redaction
- Connects GitHub Actions with hosted Armor administration
- Where it doesn't
- Deployment and integration scope is narrower than full vault products
- Solo includes only 1 user and 5-day audit retention
- Advanced hosted administration begins at $20 per month
dotenvx fact sheet, pricing and score →
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update