Skip to content

[Feature Request] age encryption #345

Description

@CanRau

Description

Any plan to add age encryption?

Motivation

(Cloud) vaults etc are great and have benefits like auditing etc, but for some projects it's overkill and just simpler to not rely on another service and have all secrets encrypted stored in the repo

Proposed Solution

Add age encryption

Alternatives

fnox

Additional Information

Currently use fnox for this use case, but varlock seems to have very nice to haves

Activity

  1. philmillman commented on Mar 9, 2026

    @philmillman
    Member

    That should be doable, any thoughts on the implementation there? Would it be whole .env files (per plugin instance?) that are being decrypted and applied in bulk?

  2. CanRau commented on Mar 11, 2026

    @CanRau
    Author

    Hmm not sure, not yet too familiar with varlock, but from what I understand yea this looks kinda like fnox import which was very useful to switch from existing .env files. But later be ablet to fnox set individual keys as well.
    And then multiple profiles for different environments, which are similar to https://varlock.dev/guides/environments/, right?

  3. philmillman commented on Mar 11, 2026

    @philmillman
    Member

    Yeah I'm thinking practically speaking we can make this work in a similar way to 1Password where you can apply entire Environments in bulk or single items.

  4. CanRau commented on Mar 11, 2026

    @CanRau
    Author

    don't know enough about varlock nor 1p to fully grasp what you're saying 😅

  5. philmillman commented on Mar 11, 2026

    @philmillman
    Member

    Yeah fair enough, well I think it's fair to say we'll want the ability to bulk decrypt and decrypt a single item, right?

  6. CanRau commented on Mar 12, 2026

    @CanRau
    Author

    For decryption in my case I think bulk yea

  7. theoephraim commented on Apr 10, 2026

    @theoephraim
    Member

    @CanRau - we will still likely add an age plugin at some point, but we are also rolling out built-in encryption utilities. Would love to hear what you think if you're up for testing it out!

  8. CanRau commented on Apr 10, 2026

    @CanRau
    Author

    Hey, generally yes, although I'm currently more or less happy with fnox I'd be open to test and compare 🤓

  9. theoephraim commented on Apr 10, 2026

    @theoephraim
    Member

    awesome - would definitely appreciate any notes/feedback :) The main thing we are missing right now is the sops-style encryption with shared keys or cloud KMS systems, but that should come soon. And we do provide a lot of additional functionality.

  10. CanRau commented on Apr 11, 2026

    @CanRau
    Author

    Let me know when what how to test, I'll be here 🫡

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    enhancementNew feature or request

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions