Dotenv is the library that popularized .env files for loading environment variables securely in development environments, now advanced with Dotenvx for encrypted secrets management, aimed at developers and teams worldwide.

---

🚀 Overview

Dotenv standardized the use of .env files to manage environment variables, keeping sensitive configuration out of source code for Node.js projects and beyond. It addressed the pain of hardcoding secrets or scattering them across config files. However, plaintext .env files created security vulnerabilities like accidental git commits or breaches.

Dotenvx solves this by providing end-to-end encryption for .env files using public-key cryptography, enabling safe commits to git while decrypting at runtime. It's a drop-in replacement that's cross-platform and supports GitOps workflows.

This project is built for developers, DevOps teams, and companies handling secrets in any language or platform. Scott Motte created it to simplify and secure config management, evolving from the original 2015 Node.js library to a universal tool.

---

✨ Key Features

• Zero-dependency loading of .env files into process.env with support for multiline, quotes, variables, and comments (classic Dotenv)
• Public-key encryption (secp256k1) of .env files for secure git storage and runtime decryption (Dotenvx)
• Cross-platform CLI (dotenvx run) working on Node.js, Python, Ruby, Go, Rust, Java, PHP, Docker, CI/CD like GitHub Actions, Vercel, Heroku
• Multi-environment support (.env.local, .env.production) with conventions for Next.js, etc., and variable expansion
• Optional: Extensions (gitignore, precommit), ops mode (cloud keys), Cloak-Zero for AI prompts

---

🛠 Tech Stack

• CLI Core: Go
• NPM/Distribution: JavaScript, TypeScript, esbuild
• Supports: Node.js, Deno, Bun, Python, PHP, Ruby, Go, Rust, Java, Kotlin, .NET, Bash, Fish, Docker Compose
• Build/Deploy: Docker, npm, brew, winget, GitHub Releases
• No Database/Auth/Hosting needed (CLI/library)

---

👥 Who Is This For?

This project is useful for:

• Developers who want to encrypt .env files without workflow changes
• Teams looking for secure, cross-platform secrets in GitOps and CI/CD
• Indie makers building apps, AI prompts, or services needing config management

---

📸 Screenshots / Demo

• Live demo: https://dotenvx.com
• GitHub: https://github.com/dotenvx/dotenvx, https://github.com/motdotla/dotenv

---

🔥 Project Status

• 🟢 Actively building

Last updated: 2026-03-24

---

❓ FAQ

Is this project free?

Freemium — Open-source core (encryption, CLI, multi-env) is free (BSD-3); Pro ($299+/mo) adds web UI, audit logs, PR reviews, support.

Is the source code available?

Yes — https://github.com/dotenvx/dotenvx (5.2k stars, 36 contributors), https://github.com/motdotla/dotenv (20.3k stars)

Can I contribute?

Yes — Fork repos, submit PRs, report issues on GitHub. Actively maintained with recent commits (Mar 22, 2026).

---

📬 Contact & Links

• Website: https://www.dotenv.org, https://dotenvx.com
• GitHub: https://github.com/motdotla
• Twitter/X: https://x.com/motdotla
• Email: scott@dotenvx.com

---

Built with ❤️ and kept warm on WarmIndex.