age — The Complete Guide: File Encryption in One Command, with No Configuration Hassle
age is a minimalist encryption tool developed by Filippo Valsorda. There are no config files and no algorithm choices — you encrypt with one command and decrypt with one command. The code is open source under BSD-3-Clause, free for any use including commercial, and ready-made binaries exist for Windows, macOS and Linux.
age
Filippo Valsorda
Simple, modern command-line tool to encrypt files with a passphrase or public key, including SSH keys and post-quantum keys.
Get it from the vendorWhat you get
- Passphrase encryption — simple and quick for a single file or an archive.
- Short keys — age-keygen creates a key pair that is easy to copy and share.
- SSH keys — encryption to an SSH key the recipient already has.
- Multiple recipients — one file that several people can open.
- Plugins — support for hardware such as YubiKey.
How it is used in practice
You encrypt a backup of a project folder or a data file before uploading it to the cloud, and add the command to a nightly backup script. The limitations: there is no graphical interface and no digital signing, and the recipient needs age or a compatible tool. Security tip: keep the private key file outside any folder that is backed up to the cloud, with an extra offline copy — without it the backups cannot be opened.
Related tools
For encryption with digital signatures and a graphical interface on Windows — Gpg4win. For an encrypted folder that syncs to the cloud — Cryptomator. For encrypted backups with version history — restic.
Gpg4win
g10 Code / Gpg4win project
GnuPG package for Windows to encrypt and digitally sign files and email, including Kleopatra and an Outlook add-in.
Get it from the vendor
Cryptomator
Skymatic
Client-side encryption before files reach the cloud — encrypted vaults inside Dropbox, OneDrive or Google Drive.
Get it from the vendor
restic
restic project
Fast, encrypted, deduplicated backups — project folders to disk, NAS or cloud storage.
Get it from the vendor
VeraCrypt
IDRIX
Encrypt disks, partitions and USB drives — protect drawings and client data if a laptop is lost.
Get it from the vendorThe bottom line
The simplest way to encrypt files from a script or the terminal. Anyone who needs signatures or a graphical interface should pick another tool.