1. age-inspect(1)
  2. age-inspect(1)

NAME

age-inspect - inspect age(1) encrypted files

SYNOPSIS

age-inspect [--json] [INPUT]

DESCRIPTION

age-inspect reads an age(1) encrypted file from INPUT (or standard input) and displays metadata about it without decrypting.

This includes the recipient types, whether it uses post-quantum encryption, and a size breakdown of the file components.

OPTIONS

--json
Output machine-readable JSON instead of human-readable text.
--version
Print the version and exit.

JSON FORMAT

When --json is specified, the output is a JSON object with these fields:

EXAMPLES

Inspect an encrypted file:

$ age-inspect secrets.age
secrets.age is an age file, version "age-encryption.org/v1".

This file is encrypted to the following recipient types:
- "mlkem768x25519"

This file uses post-quantum encryption.

Size breakdown (assuming it decrypts successfully):

    Header                      1627 bytes
    Encryption overhead           32 bytes
    Payload                       42 bytes
                        -------------------
    Total                       1701 bytes

Tip: for machine-readable output, use --json.

Get JSON output for scripting:

$ age-inspect --json secrets.age
{
    "version": "age-encryption.org/v1",
    "postquantum": "yes",
    "armor": false,
    "stanza_types": [
        "mlkem768x25519"
    ],
    "sizes": {
        "header": 1627,
        "armor": 0,
        "overhead": 32,
        "min_payload": 42,
        "max_payload": 42,
        "min_padding": 0,
        "max_padding": 0
    }
}

SEE ALSO

age(1), age-keygen(1)

AUTHORS

Filippo Valsorda age@filippo.io

  1. December 2025
  2. age-inspect(1)