diff --git a/.gitattributes b/.gitattributes
new file mode 100644
index 0000000..84739e5
--- /dev/null
+++ b/.gitattributes
@@ -0,0 +1,3 @@
+secretfile filter=git-crypt diff=git-crypt
+*.key filter=git-crypt diff=git-crypt
+secretdir/** filter=git-crypt diff=git-crypt
diff --git a/files/Brewfile b/files/Brewfile
index 559d3b9..196c60f 100644
--- a/files/Brewfile
+++ b/files/Brewfile
@@ -6,6 +6,7 @@ tap "homebrew/core"
 brew "fish"
 brew "git"
 brew "git-lfs"
+brew "git-crypt"
 brew "gnupg"
 brew "go"
 brew "htop"