npm · #3608

@dotenvx/dotenvx

2.21.0dotenvx/dotenvx ↗

a secure dotenv–from the creator of `dotenv`

Last release 16 days ago
10 Aug 2026
Ships on a steady schedule
a new release about every 8 days
Nearly every release is documented
notes for 328 of 338 stable releases
Nothing withdrawn
no release was ever pulled
3 years old
338 releases · first in 2023

Release timeline

338 releases since 2023

202420252026

Releases

0.43.020 May 2024
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Added
- Support require('@dotenvx/dotenvx').config() for DOTENV_PRIVATE_KEY decryption (#225)
Open source →
0.42.020 May 2024
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Added
- Added .env.vault deprecated warning when using DOTENV_KEY. Provide instructions to convert to encrypted .env files. (#224)
Open source →

0.41.020 May 2024

Release notes

see CHANGELOG

Open source →

Release notes2 sources agree

Added

Added vault convert command to list convert instructions for converting .env.vault to encrypted .env files (#222)

To convert your .env.vault file to encrypted .env file(s):

  1. Run [dotenvx vault decrypt]
  2. Run [ls -a .env*]

Lastly, convert each .env(.environment) file:

  3. Run [dotenvx convert -f .env.production]

For example:

  $ dotenvx convert -f .env
  $ dotenvx convert -f .env.ci
  $ dotenvx convert -f .env.production

Afterward:

Update production with your new DOTENV_PRIVATE_KEY_PRODUCTION located in .env.keys

Learn more at [https://dotenvx.com/docs/quickstart#add-encryption]

Changed

Rename encryptme to convert (#222)

Open source →

0.40.018 May 2024
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Added
- Added dotenvx encryptme command to convert an entire .env file to an encrypted .env file. (#213)
Changed
- Made precommit smart enough to check if a .env* file is encrypted or not. If fully encrypted, then allow precommit check to pass (#211)
Removed
- Do not warn of missing files for conventions (too noisy) (#216)
Open source →
0.39.014 May 2024
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Added
- Add --convention flag to get
Removed
- Removed help messages like 'in production' and 'in ci'. Too specific and could lead to confusion.
Open source →
0.38.09 May 2024
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Changed
- ⚠️ DEPRECATION NOTICE: the following commands are being moved. Please, update any code and muscle memory you have related to these:
  - dotenvx encrypt => dotenvx vault encrypt
  - dotenvx decrypt => dotenvx vault decrypt
  - dotenvx status => dotenvx vault status
- ⚠️ DEPRECATION NOTICE: the beta hub commands are being completely deprecated (they will be fully removed in upcoming 1.0.0 release). We will provide .env.keys tooling at a later time (replacing hub) but in the context of the new --encrypt flag functionality below
Added
- Add encryption to your .env files with a single command. Pass the --encrypt flag. 🎉
```
$ dotenvx set HELLO World --encrypt
set HELLO with encryption (.env)
```
A DOTENV_PUBLIC_KEY (encryption key) and a DOTENV_PRIVATE_KEY (decryption key) is generated using the same public-key cryptography as Bitcoin.

Further notes:
- DOTENV_PUBLIC_KEY lives in the .env file. You can safely share this with whomever you wish.
- DOTENV_PRIVATE_KEY lives in your .env.keys file. Share this only with those you trust to decrypt your secrets.
- If using encrypted .env files like this it is safe to commit them to source code. This makes reviewing PRs that contain secrets much easier.
- Tell your contributors to contribute a secret using the command dotenvx set HELLO world --encrypt.
- Set your DOTENV_PRIVATE_KEY on your server to decrypt these values using dotenvx run -- yourcommand
- You can repeat all this per environment by modifying your set command to dotenvx set HELLO production -f .env.production --encrypt (for example)
- In time we will add better tooling for sharing the private keys living in .env.keys, but until then safely share with team members you trust.
- This mechanism should be particularly useful for open source projects that want to permit secrets contributions without handing out the decryption keys. Now anyone can contribute a secret and only you can decrypt it to see what was changed.
- This solution is brand new, but I intend it to be the future for .env files. It has many benefits over .env.vault files. We will be sunsetting the .env.vault mechanism but its tooling will stay around in dotenvx for at least 1 year to come - under dotenvx vault parent command.
- Be patient as we update our documentation to prioritize this improved encryption format for .env files.
Open source →
0.37.130 Apr 2024
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
- warn when running dotenvx status against any untracked (not in .env.vault) files (#196)
Open source →
0.37.028 Apr 2024
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
- add --convention nextjs flag to dotenvx run (#193)
- improve status error message when decrypt fails or no .env* files (#192)
Open source →
0.36.127 Apr 2024
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
- handle SIGTERM (#191)
Open source →
0.36.027 Apr 2024
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
- add dotenvx status command (#186)
- add dotenvx decrypt [directory] argument option (#186)
- add dotenvx decrypt --environment flag option (#186)
- normalize windows \ paths (#186)
Open source →
0.35.119 Apr 2024
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Changed
- exit code 1 if get KEY not found/undefined (#185)
Open source →
0.35.019 Apr 2024
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Added
- added set command, and optionally pass --env-file flag(s) to set usage: dotenvx set HELLO World (#182)
Open source →
0.34.017 Apr 2024
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Changed
- make hub push more forgiving by permitting full filepath like hub push directory/.env.keys (#180)
- add note on generated .env.example (#181)
Open source →
0.33.115 Apr 2024
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Changed
- patch injection around falsy values (#177)
Open source →
0.33.015 Apr 2024
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Added
- add .env.vault support for .env.something.something (useful for Next.js pattern of .env.development.local) (#174)
Open source →
0.32.09 Apr 2024
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Changed
- quiet exit code 1 message (#173)
Open source →
0.31.18 Apr 2024
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Changed
- improve error messages (#171)
Open source →
0.31.08 Apr 2024
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Added
- add hub logout command (#170)
Open source →
0.30.28 Apr 2024
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Changed
- small fixes for windows users related to hub open and hub push (#169)
Open source →
0.30.18 Apr 2024
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Changed
- remove windows warnings related to missing git or git origin (#166 #167)
Open source →
0.30.06 Apr 2024
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Added
- dotenvx get --quiet will display the value no matter what (adds a blank0 logger level) (#161)
Changed
- refactor dotenvx get to use run under the hood
Open source →
0.29.25 Apr 2024
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Changed
- fix broken hub login and hub open (#160)
Open source →
0.29.15 Apr 2024
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Changed
- patch situation where DOTENV_KEY is present and --env-file flag is set. assume to still look for .env.vault file as first in line (#157)
Open source →
0.29.04 Apr 2024
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Changed
- respect order for --env-vault-file, --env-file and --env flags (for example: dotenvx run --env "HELLO=one" --env-file=.env will prioritize --env flag. Add --overload here to prioritize --env-file or reverse the order.). you can now mix and match multiple flags in any complex order you wish and dotenvx will respect it. (#155)
Open source →
0.28.03 Apr 2024
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Added
- add dotenvx settings command to list your current settings. in the future we'll provide ways to modify these settings as dotenvx's functionality grows (#153)
Open source →
0.27.22 Apr 2024
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Added
- add windows postrelease step to check that dotenvx.exe is functional immediately after release (#141)
Changed
- replace package-json with undici (#146)
- prune redundant packages (#148)
- return current version if remote version fails (#149)
- switch to our own update notice mechanism (eliminating multiple deps) (#151)
Open source →
0.27.126 Mar 2024
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Added
- provide .zip download option for windows executable (#140)
Removed
- remove got from top level deps (#139)
Open source →
0.27.025 Mar 2024
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Changed
- move update-notifier into lib/helpers for more control over got lib (#138)
- move clipboardy into lib/helpers for more control and to support commonjs going forward (sindre has dropped support and many mature systems still require commonjs for their infra and have need of dotenvx). (#137)
Open source →
0.26.018 Mar 2024
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Added
- add hub pull command to pull a repo's .env.keys down. (#129)
Open source →
0.25.114 Mar 2024
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Changed
- 🐞 patch bug with evaluate commands. do not attempt to evaluate risky preset envs in process.env. evaluate only what's set in a .env* file (#125)
Open source →
0.25.012 Mar 2024
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Added
- expand hub push with [directory] option. use for monorepos. for example: dotenvx hub push apps/backend (#121)
Open source →
0.24.029 Feb 2024
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Added
- add command substitution. for example DATABASE_URL="postgres://$(whoami)@localhost/my_database" (#113)
Open source →
0.23.028 Feb 2024
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Added
- support personal environment variables. anything after the comment # personal.dotenvx.com will be considered personal and will not be encrypted to .env.vault (#110)
Open source →
0.22.028 Feb 2024
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Added
- require('@dotenvx/dotenvx').config() expands/interpolates variables. this matches the behavior of run. (note that this behavior differs from the original require('dotenv').config() (#107)
Open source →
0.21.027 Feb 2024
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Added
- expose genexample function on lib/main.js for export convenience (#102)
Changed
- rely on which npm module to find system command path for user inputted command(s) (#105)
Removed
- remove main.inject function (#102)
Open source →
0.20.225 Feb 2024
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Added
- added support for --env flag on the .env.vault decryption portion of run (#101)
Open source →
0.20.124 Feb 2024
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Changed
- use system command path (#98)
Open source →
0.20.023 Feb 2024
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Changed
- added --env flag. for example, dotenvx --env="HELLO=World" -- yourcommand (#94)
Open source →
0.19.122 Feb 2024
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Changed
- patched up the precommit command (#91)
Open source →
0.19.022 Feb 2024
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Added
- added scan command to scan for possible leaked secrets in your code (#90)
Open source →
0.18.021 Feb 2024
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Added
- added get command, optionally pass --env-file flag(s) to get, optionally pass --overload, and optionally pass --pretty-print. usage: dotenvx get HELLO => World (#89)
Open source →
0.17.121 Feb 2024
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Changed
- expose main.encrypt and main.ls functions
Open source →
0.17.020 Feb 2024
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Added
- added [directory] argument to encrypt. for example, in your nx repo from root dotenvx encrypt apps/backend will encrypt .env* files in that directory and manage the .env.keys and .env.vault in that directory as well (#82)
Open source →
0.16.120 Feb 2024
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Changed
- bumped dotenv version to fix encrypt bug
Open source →
0.16.018 Feb 2024
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Added
- added ls command to list all your .env* files (#80)
- added --env-file option ls (#82)
- optionally specify --env-vault-file path to .env.vault (defaults to .env.vault) (#73)
Open source →
0.15.412 Feb 2024
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Changed
- 🐞 patch --overload flag logic (#66)
Open source →
0.15.311 Feb 2024
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Changed
- 🐞 fix undici readablestream error (#65)
Open source →
0.15.211 Feb 2024
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Changed
- switch from axios to undici (#59)
- bump dotenv-expand (#63)
Open source →
0.15.110 Feb 2024
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Changed
- use improved dotenv expansion (#62)
Open source →
0.15.06 Feb 2024
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Added
- add expansion (#60)
- use dotenvx.com (#56)
Open source →
0.14.127 Jan 2024
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Changed
- patch esm issue. use update-notifier ^5.1.0
Open source →
0.14.027 Jan 2024
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Added
- Added genexample command. Generate .env.example from your .env file. (#49)
- couple security patches (#50, #51)
Open source →
0.13.027 Jan 2024
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Added
- Added decrypt command. Decrypt .env.vault to prospective .env* files. .env.keys must be present. (#48)
Open source →
0.12.027 Jan 2024
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Added
- Append to .gitignore with gitignore command (also .dockerignore, .npmignore, and .vercelignore if existing) (#47)
Open source →
0.11.025 Jan 2024
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Removed
- no longer append to *ignore files automatically. too invasive. will provide as separate cli command (#45)
Open source →
0.10.624 Jan 2024
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Changed
- Improve error message when decryption fails (#40)
Open source →
0.10.518 Jan 2024
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Changed
- Rename predockerbuild command to prebuild (#36)
Open source →
0.10.418 Jan 2024
Release notes2 sources agree
Added
- Add predockerbuild command to prevent including .env file in your docker builds (#35)
Open source →
0.10.317 Jan 2024
Release notes2 sources agree
Changed
- If dotenvx is missing tell user how to install it from pre-commit (#34)
- Add help notice for ci (when .env file not present) (#33)
Open source →
0.10.215 Jan 2024
Release notes2 sources agree
Changed
- Improve error message when custom --env-file passed (#32)
Open source →

@dotenvx/dotenvx

Release timeline

Releases

Added

Added

Added

Changed

Added

Changed

Removed

Added

Removed

Changed

Added

Changed

Added

Changed

Changed

Added

Changed

Changed

Added

Changed

Changed

Added

Changed

Changed

Changed

Changed

Added

Added

Changed

Added

Removed

Changed

Added

Changed

Added

Added

Added

Added

Added

Changed

Removed

Added

Changed

Changed

Changed

Added

Added

Changed

Added

Changed

Added

Changed

Changed

Changed

Changed

Added

Changed

Added

Added

Added

Removed

Changed

Changed

Added

Changed

Changed