ansible-vault

Encrypt Ansible secrets

medium risk

interactive breakdown — edit the command and press Explain

$

⚠ Risks & cautions

Back up the vault password in a secret manager.
`decrypt` leaves plaintext on disk.

What it does

Encrypts/decrypts variables and files. See the flags and examples below, and run `man ansible-vault` for the full reference.

Examples

ansible-vault encrypt vars.ymlEncrypt · explain & risk-check →

ansible-vault view vars.ymlView · explain & risk-check →

Related

ansible-playbook

Open the full explainer →More in Terraform, Ansible & IaC

Reference text is hand-written and may be incomplete — check man ansible-vault for your version. Test destructive commands on a non-production system first.