Skip to content

First Steps with Kānuka

After installing Kānuka, you can check that it is available by running the kanuka command:

Terminal window
$ kanuka
Welcome to Kānuka! Run 'kanuka --help' to see available commands.

Run kanuka --help to see a list of all the available commands.

Kānuka provides secrets management for securely sharing environment variables and API keys across your team.

Terminal window
# Navigate to your project
cd my-project
# Initialize Kānuka
kanuka secrets init

If this is your first time using Kānuka, you’ll be prompted to set up your identity (email, name, and device name). This only happens once.

Terminal window
# Encrypt all .env files
kanuka secrets encrypt

This creates encrypted .kanuka files that are safe to commit to version control.

Commit the .kanuka directory and encrypted files:

Terminal window
git add .kanuka/ *.kanuka
git commit -m "Add encrypted secrets"
git push

When a team member clones the repo and has been registered, they can decrypt:

Terminal window
kanuka secrets decrypt
┌─────────────────┐ ┌─────────────────┐ ┌─────────────────┐
│ kanuka secrets │ │ kanuka secrets │ │ git push │
│ init │ ──▶ │ encrypt │ ──▶ │ │
└─────────────────┘ └─────────────────┘ └─────────────────┘
│ │ │
▼ ▼ ▼
Sets up identity .env → .env.kanuka Share with team
Creates project Safe to commit
┌─────────────────┐ ┌─────────────────┐ ┌─────────────────┐
│ git clone │ │ kanuka secrets │ │ kanuka secrets │
│ git pull │ ──▶ │ create │ ──▶ │ decrypt │
└─────────────────┘ └─────────────────┘ └─────────────────┘
│ │ │
▼ ▼ ▼
Get latest secrets Create your keys .env.kanuka → .env
(if new to project) Access your secrets
  • Run kanuka --help to see all available commands
  • Use kanuka <command> --help for specific command help
  • Check the CLI reference for comprehensive documentation
  • See the FAQ for common questions