Skip to main content
Use capy run to decrypt .env and pass the plaintext values to your binary. Your code reads env vars the standard way with os.Getenv, with no library to add. Libraries that read the process environment (envconfig, Viper’s AutomaticEnv) work unchanged. Once Capy syncs, .env holds capy:… ciphertext rather than plaintext, so drop godotenv.Load() and anything else that parses .env from disk — capy run is what supplies the real values.
1

Install the CLI

2

Sync your secrets

Authenticates, creates the project on first run, encrypts every value in .env, and rewrites the file with capy:… snippets.
3

Run your app

Read env vars the standard way:
4

Invite a teammate

5

Deploy

​
What’s next

Running your app

The full story on capy run.

Deploying

Deploy tokens and platform walkthroughs.
Last modified on August 11, 2026