diff --git a/.travis.yml b/.travis.yml
index bdcfd65..b4598f5 100644
--- a/.travis.yml
+++ b/.travis.yml
@@ -10,9 +10,7 @@ before_script:
 install:
 - yarn
 script:
+- if [ "TRAVIS_PULL_REQUEST" = "false" ]; then bash ./scripts/decrypt.sh; fi
 - yarn build
 - yarn lint
 - yarn test
-before_install:
-- openssl aes-256-cbc -K $encrypted_4f23b46f1ec6_key -iv $encrypted_4f23b46f1ec6_iv
-  -in .env.enc -out .env -d
diff --git a/package.json b/package.json
index e397911..6d1dacf 100644
--- a/package.json
+++ b/package.json
@@ -13,7 +13,7 @@
   },
   "husky": {
     "hooks": {
-      "pre-commit": "yarn test && yarn lint && travis encrypt-file .env --add --force && git add ."
+      "pre-push": "yarn test && yarn lint && travis encrypt-file .env --add --force && git add .env.enc && git commit -m \"add encrypted key\""
     }
   },
   "repository": {
diff --git a/scripts/decrypt.sh b/scripts/decrypt.sh
new file mode 100644
index 0000000..2b3a5f3
--- /dev/null
+++ b/scripts/decrypt.sh
@@ -0,0 +1,2 @@
+#!/bin/bash
+openssl aes-256-cbc -K $encrypted_4f23b46f1ec6_key -iv $encrypted_4f23b46f1ec6_iv -in .env.enc -out .env -d
diff --git a/scripts/encrypt.sh b/scripts/encrypt.sh
new file mode 100644
index 0000000..4bfeae2
--- /dev/null
+++ b/scripts/encrypt.sh
@@ -0,0 +1,6 @@
+#!/bin/bash
+yarn test
+yarn lint
+travis encrypt-file .env --add --force
+git add .env.enc
+git commit -m "add encrypted private key for travis testing"