fnox is a unified secret management tool that supports both encrypted storage in git and remote cloud providers. It offers encryption via age, AWS KMS, Azure KMS, and GCP KMS, plus integration with cloud secret managers like AWS Secrets Manager, Azure Key Vault, and password managers like 1Password and Bitwarden. Features include shell integration for auto-loading secrets, profile-based multi-environment support, and a simple TOML configuration format. Secrets can be encrypted and committed to version control or referenced from remote providers, with flexible mixing of approaches across development, staging, and production environments.