Can I rename an encrypted env file?

Yes — but do it from inside Dotvault. Right-click the file in the sidebar and pick Rename. Dotvault moves the keychain entry along with the file, so you won’t have to paste the key again.

If you rename the file outside Dotvault — in your shell, in your IDE, or from Finder — the keychain entry gets left behind, and you’ll be prompted to re-paste the key the next time you open the renamed file. The orphaned entry gets cleaned up automatically on the next launch, so there’s no clutter left over — just a small one-time inconvenience.