SOPS: Secrets OPerationS

sops is an editor of encrypted files that supports YAML, JSON, ENV, INI and BINARY formats and encrypts with AWS KMS, GCP KMS, Azure Key Vault, age, and PGP.


1 Download

1.1 Stable release

Binaries and packages of the latest stable release are available at

1.2 Development branch

For the adventurous, unstable features are available in the develop branch, which you can install from source:

$ go get -u
$ cd $GOPATH/src/
$ git checkout develop
$ make install

(requires Go >= 1.13)

If you don't have Go installed, set it up with:

$ {apt,yum,brew} install golang
$ echo 'export GOPATH=~/go' >> ~/.bashrc
$ source ~/.bashrc
$ mkdir $GOPATH

Or whatever variation of the above fits your system and shell.

To use sops as a library, take a look at the decrypt package.

What happened to Python Sops? We rewrote Sops in Go to solve a number of deployment issues, but the Python branch still exists under python-sops. We will keep maintaining it for a while, and you can still pip install sops, but we strongly recommend you use the Go version instead.