age

age is a simple, modern, and secure file encryption tool that uses small explicit keys, no config options, and UNIX-style composability. You encrypt files with short public keys and pipe them between commands as easily as any other shell tool.

Files can be encrypted to multiple recipients at once, protected with a passphrase, or locked to ssh-rsa and ssh-ed25519 SSH keys. Hybrid post-quantum keys guard against future quantum attacks, and the age-inspect command reports recipient types, payload size, and post-quantum status without decrypting.

Keys are generated with age-keygen, and recipient lists can be read from files or standard input. Machine-readable JSON output makes age easy to wire into scripts and automation.