__ _______________________ _________._________________________ \_ _____/ \______ \ / _ \ / _____/ / _____/ | | \_ _____/ | __) | _/ / /_\ \ / \ ___ / \ ___ | | | __)_ | \ | | \ / | \ \ \_\ \ \ \_\ \ | |___ | \ \___ / |____|_ / \____|__ / \______ / \______ / |_______ \ /_______ / \/ \/ \/ \/ \/ \/ \/

age Cheatsheet

← Back to cheatsheets

← Home

age is a simple, modern file encryption tool. It's designed to replace GPG for file encryption with a simpler, safer design. Uses modern cryptography (X25519, ChaCha20Poly1305, HKDF).

Key Generation

  • age-keygen -o key.txt - Generate a new keypair
  • age-keygen -y key.txt - Extract public key from keypair
  • Public key format: age1...
  • Private key format: AGE-SECRET-KEY-1...

Encryption

  • age -r age1... -o encrypted.age file.txt - Encrypt with recipient public key
  • age -r age1... -r age1... file.txt - Encrypt to multiple recipients
  • age -p -o encrypted.age file.txt - Encrypt with passphrase
  • cat file.txt | age -r age1... > encrypted.age - Encrypt from stdin

Decryption

  • age -d -i key.txt -o decrypted.txt encrypted.age - Decrypt with key file
  • age -d encrypted.age - Decrypt with passphrase (prompts)
  • age -d -i key.txt encrypted.age - Decrypt to stdout
  • cat encrypted.age | age -d -i key.txt - Decrypt from stdin

Options

  • -r, --recipient - Recipient public key (can use multiple times)
  • -i, --identity - Identity (private key) file
  • -o, --output - Output file
  • -p, --passphrase - Encrypt with passphrase instead of key
  • -d, --decrypt - Decrypt mode
  • -y, --yubikey - Use YubiKey for decryption

Common Examples

Generate Keypair

age-keygen -o ~/.age/key.txt

Create a new keypair and save to file.

Encrypt File

age -r age1abc123... -o secret.age secret.txt

Encrypt file to recipient.

Decrypt File

age -d -i ~/.age/key.txt -o secret.txt secret.age

Decrypt file with private key.

Passphrase Encryption

age -p -o backup.age backup.tar.gz

Encrypt with passphrase (no key needed).

Multiple Recipients

age -r age1... -r age1... -o shared.age document.txt

Encrypt so multiple people can decrypt.

Tips

  • age is simpler and faster than GPG for file encryption
  • Public keys are safe to share (age1... format)
  • Keep private keys secure (AGE-SECRET-KEY-1... format)
  • Use passphrase mode for quick encryption without key management
  • Multiple recipients can decrypt the same file
  • Great for encrypting backups, secrets, and sensitive files