Dotenvx Pro is a commercial extension for dotenvx.
Secrets Manager for Env Files 🏆
- Encrypted
- Cloaked
- Secrets as Code
Quickstart

Install dotenvx pro.
npm install @dotenvx/dotenvx-pro --save
npx dotenvx pro help
curl -sfS https://dotenvx.sh/pro | sh
dotenvx pro help
brew install dotenvx/brew/dotenvx-pro
dotenvx pro help
curl -L -o dotenvx-pro.tar.gz "https://github.com/dotenvx/dotenvx-pro/releases/latest/download/dotenvx-pro-$(uname -s)-$(uname -m).tar.gz"
tar -xzf dotenvx-pro.tar.gz
./dotenvx-pro help
Then encrypt
and cloak
.
$ dotenvx encrypt
$ dotenvx pro cloak
✔ cloaked (DOTENV_PRIVATE_KEY)
That's it, enjoy Pro! 🏆
Usage
$ dotenvx pro
Usage: @dotenvx/dotenvx-pro [options] [command]
dotenvx pro 🏆
Options:
-l, --log-level <level> set log level (default: "info")
-q, --quiet sets log level to error
-v, --verbose sets log level to verbose
-d, --debug sets log level to debug
-V, --version output the version number
-h, --help display help for command
Commands:
sync [options] sync
push [options] push
pull [options] pull
open [options] view repository on dotenvx pro
login [options] log in
logout [options] log out
keypair [options] [key] print public/private keys for .env file(s)
ls [options] [directory] print all .env files in a tree structure
settings ⚙️ settings
Advanced
Become a
dotenvx pro
power user.
CLI 📟
Advanced CLI commands.
- <summary>`pro keypair`</summary>
Print fully managed public/private keys for
.env
file.$ echo "HELLO=World" > .env $ dotenvx encrypt $ dotenvx pro push $ dotenvx pro keypair {"DOTENV_PUBLIC_KEY":"<publicKey>","DOTENV_PRIVATE_KEY":"<privateKey>"}
- <summary>`pro keypair -f`</summary>
Print fully managed public/private keys for
.env.production
file.$ echo "HELLO=Production" > .env.production $ dotenvx encrypt -f .env.production $ dotenvx pro push $ dotenvx pro keypair -f .env.production {"DOTENV_PUBLIC_KEY_PRODUCTION":"<publicKey>","DOTENV_PRIVATE_KEY_PRODUCTION":"<privateKey>"}
- <summary>`pro keypair DOTENV_PRIVATE_KEY`</summary>
Print specific fully managed keypair for
.env
file.$ echo "HELLO=World" > .env $ dotenvx encrypt $ dotenvx pro push $ dotenvx pro keypair DOTENV_PRIVATE_KEY <privateKey>
- <summary>`pro settings org`</summary>
Print organization.
$ dotenvx pro settings org motdotla
- <summary>`pro settings orgpublickey`</summary>
Print organization public key–used for encrypting project private keys.
$ dotenvx pro settings orgpublickey 02761eccd2a442ebbfa14ac2e72762d885a1e96b8949428deea62db305947d6408
- <summary>`pro settings orgprivatekey`</summary>
Print masked organization private key–used for decrypting project private keys.
$ dotenvx pro settings orgprivatekey 322c004*********************************************************
- <summary>`pro settings orgprivatekey --unmask`</summary>
Print unmasked organization private key–used for decrypting project private keys.
$ dotenvx pro settings orgprivatekey --unmask 322c004271ac6ad1b548df3f316ff4e8f08e17e0b15f459db64f3f3b48b0efb7
- <summary>`pro settings orgteam`</summary>
Print team status in tabular format.
$ dotenvx pro settings orgteam ╔═══════════╤════════╗ ║ username │ synced ║ ╟───────────┼────────╢ ║ motdotla │ ✔ ║ ╟───────────┼────────╢ ║ motdotenv │ ✔ ║ ╚═══════════╧════════╝
- <summary>`pro settings storetree`</summary>
Print encrypted store tree–backing your dotenvx pro installation.
$ dotenvx pro settings storetree ├─ .env └─ pro.dotenvx.com ├─ user-1-organization-1.json ├─ user-1-private-key.json └─ user-1.json