TIL vim has built-in encryption. If you type :X it prompts you for a passphrase and after saving the file it will be stored in encrypted form. When you reopen the file in vim it detects the encrypted format and prompts you for the passphrase to decrypt, so it's completely transparent. It uses the blowfish cipher, which is pretty old now but still considered secure, so long as it's only used for small files