@dotenvx/dotenvx-pro

Pro no longer maintained – and will shutdown February 2026. Please switch to Dotenvx Ops.

Dotenvx Pro is a commercial extension for dotenvx.

Secrets manager for .env files

• Encrypt them
• Cloak them
• Sync them

Learn more

Quickstart

Install dotenvx pro.

npm install @dotenvx/dotenvx-pro --save
npx dotenvx pro help

curl -sfS https://dotenvx.sh/pro | sh
dotenvx pro help

brew install dotenvx/brew/dotenvx-pro
dotenvx pro help

curl -L -o dotenvx-pro.tar.gz "https://github.com/dotenvx/dotenvx-pro/releases/latest/download/dotenvx-pro-$(uname -s)-$(uname -m).tar.gz"
tar -xzf dotenvx-pro.tar.gz
./dotenvx-pro help

Then encrypt and cloak.

$ dotenvx encrypt
$ dotenvx pro cloak
✔ cloaked (DOTENV_PRIVATE_KEY)

That's it, enjoy Pro!

Usage

$ dotenvx pro
Usage: @dotenvx/dotenvx-pro [options] [command]

dotenvx pro 🏆

Options:
  -l, --log-level <level>   set log level (default: "info")
  -q, --quiet               sets log level to error
  -v, --verbose             sets log level to verbose
  -d, --debug               sets log level to debug
  -V, --version             output the version number
  -h, --help                display help for command

Commands:
  sync [options]            sync
  push [options]            push
  pull [options]            pull
  open [options]            view repository on dotenvx pro
  login [options]           log in
  logout [options]          log out
  keypair [options] [key]   print public/private keys for .env file(s)
  ls [options] [directory]  print all .env files in a tree structure
  settings                  ⚙️  settings

Advanced

Become a dotenvx pro power user.

CLI

Advanced CLI commands.

• `pro keypair`

  
  

  Print fully managed public/private keys for .env file.

  $ echo "HELLO=World" > .env
  $ dotenvx encrypt
  
  $ dotenvx pro push
  
  $ dotenvx pro keypair
  {"DOTENV_PUBLIC_KEY":"<publicKey>","DOTENV_PRIVATE_KEY":"<privateKey>"}

• `pro keypair -f`

  
  

  Print fully managed public/private keys for .env.production file.

  $ echo "HELLO=Production" > .env.production
  $ dotenvx encrypt -f .env.production
  
  $ dotenvx pro push
  
  $ dotenvx pro keypair -f .env.production
  {"DOTENV_PUBLIC_KEY_PRODUCTION":"<publicKey>","DOTENV_PRIVATE_KEY_PRODUCTION":"<privateKey>"}

• `pro keypair DOTENV_PRIVATE_KEY`

  
  

  Print specific fully managed keypair for .env file.

  $ echo "HELLO=World" > .env
  $ dotenvx encrypt
  
  $ dotenvx pro push
  
  $ dotenvx pro keypair DOTENV_PRIVATE_KEY
  <privateKey>

• `pro settings org`

  
  

  Print organization.

  $ dotenvx pro settings org
  motdotla

• `pro settings orgpublickey`

  
  

  Print organization public key–used for encrypting project private keys.

  $ dotenvx pro settings orgpublickey
  02761eccd2a442ebbfa14ac2e72762d885a1e96b8949428deea62db305947d6408

• `pro settings orgprivatekey`

  
  

  Print masked organization private key–used for decrypting project private keys.

  $ dotenvx pro settings orgprivatekey
  322c004*********************************************************

• `pro settings orgprivatekey --unmask`

  
  

  Print unmasked organization private key–used for decrypting project private keys.

  $ dotenvx pro settings orgprivatekey --unmask
  322c004271ac6ad1b548df3f316ff4e8f08e17e0b15f459db64f3f3b48b0efb7

• `pro settings orgteam`

  
  

  Print team status in tabular format.

  $ dotenvx pro settings orgteam
  ╔═══════════╤════════╗
  ║ username  │ synced ║
  ╟───────────┼────────╢
  ║ motdotla  │ ✔      ║
  ╟───────────┼────────╢
  ║ motdotenv │ ✔      ║
  ╚═══════════╧════════╝

• `pro settings storetree`

  
  

  Print encrypted store tree–backing your dotenvx pro installation.

  $ dotenvx pro settings storetree
  ├─ .env
  └─ pro.dotenvx.com
     ├─ user-1-organization-1.json
     ├─ user-1-private-key.json
     └─ user-1.json