diff --git a/CHANGELOG.md b/CHANGELOG.md
index 4cf8d4c..81e9d90 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,6 +1,10 @@
 CHANGELOG
 =========
 
+## Unreleased
+
+- Append `.aes` file extension instead of substituting when encrypting
+
 ## 2.1.1 - *3/25/2019*
 
 - Updated the notice text when using environment variable `CRYPTR_PASSWORD` for the password.
diff --git a/cryptr.bash b/cryptr.bash
index 6b54223..da05588 100755
--- a/cryptr.bash
+++ b/cryptr.bash
@@ -46,9 +46,9 @@ cryptr_encrypt() {
 
   if [[ ! -z "${CRYPTR_PASSWORD}" ]]; then
     echo "[notice] using environment variable CRYPTR_PASSWORD for the password"
-    openssl $OPENSSL_CIPHER_TYPE -salt -pbkdf2 -in "$_file" -out "${_file%\.aes}" -pass env:CRYPTR_PASSWORD
+    openssl $OPENSSL_CIPHER_TYPE -salt -pbkdf2 -in "$_file" -out "${_file}.aes" -pass env:CRYPTR_PASSWORD
   else
-    openssl $OPENSSL_CIPHER_TYPE -salt -pbkdf2 -in "$_file" -out "${_file%\.aes}"
+    openssl $OPENSSL_CIPHER_TYPE -salt -pbkdf2 -in "$_file" -out "${_file}.aes"
   fi
 }