diff --git a/lua/secrets/manager.lua b/lua/secrets/manager.lua
--- a/lua/secrets/manager.lua
+++ b/lua/secrets/manager.lua
@@ -53,9 +53,9 @@ if not password or password == '' then
     return false, 'Password required'
   end
 
-  -- Use openssl for decryption (with explicit iter count for cross-platform compatibility)
+  -- Use openssl for decryption (base64 + explicit params for cross-platform compatibility)
   local cmd = string.format(
-    'openssl enc -%s -d -pbkdf2 -iter 100000 -in %s -out %s -pass pass:%s 2>&1',
+    'openssl enc -%s -d -a -pbkdf2 -iter 100000 -in %s -out %s -pass pass:%s 2>&1',
     CIPHER,
     vim.fn.shellescape(ENCRYPTED_FILE),
     vim.fn.shellescape(DECRYPTED_FILE),
@@ -117,9 +117,9 @@ file:write(content)
     file:close()
   end
 
-  -- Use openssl for symmetric encryption (with explicit iter count for cross-platform compatibility)
+  -- Use openssl for symmetric encryption (base64 + explicit params for cross-platform compatibility)
   local cmd = string.format(
-    'openssl enc -%s -salt -pbkdf2 -iter 100000 -in %s -out %s -pass pass:%s 2>&1',
+    'openssl enc -%s -salt -a -pbkdf2 -iter 100000 -in %s -out %s -pass pass:%s 2>&1',
     CIPHER,
     vim.fn.shellescape(DECRYPTED_FILE),
     vim.fn.shellescape(ENCRYPTED_FILE),
diff --git a/lua/secrets/secrets.enc b/lua/secrets/secrets.enc
--- a/lua/secrets/secrets.enc
+++ b/lua/secrets/secrets.enc
@@ -1,1 +1,4 @@
-Salted__�$��4�s�4?�^��~!Q���X�Mf��p���,�r��5��/�G�hgR+�^ �=������1@܆��~$KDK`K��5�y3Vd���IZ��dщ1~u_o�<�\iȮ�
�%��a�j^�ETR)Pu]�'�SA�4s�x(tw.���bo�h�L��1r�1��5tz�w1
+U2FsdGVkX18sGG63GOJMcQ6ajLbHE32OLIoGHwrufZf/G82PQ/KUJwmaNQQYdBn3
+yz8+oqfJtVGuNqzHM9jlEubtQJf86P6oXndYmzKIw/7JTpAGrFZH8HGRY/Ye+Vla
+UPVaX5Q5QrwSsIcrrJoQ8JtDchSpZtqtc//uBY7JqFA2zUtGuKZp/ZyLlSjiYvsZ
+cHD4Rqb4QsIpa15FDCMZbQcPbXlAwPJLNUydJBc2cUPAoq0DCOIiEwJT6dOQTgbP