diff --git a/__tests__/commands/add.test.ts b/__tests__/commands/add.test.ts
index 0a21dd8..50014ce 100644
--- a/__tests__/commands/add.test.ts
+++ b/__tests__/commands/add.test.ts
@@ -19,6 +19,9 @@ describe('add command', () => {
     vaultPath = path.join(tmpDir, '.env.vault');
     originalEnvPassword = process.env['ENVVAULT_PASSWORD'];
     process.env['ENVVAULT_PASSWORD'] = TEST_PASSWORD;
+    // Pre-create vault with fast test KDF so addCommand doesn't use
+    // production-grade Argon2id params (which timeout in CI coverage runs).
+    writeVault(vaultPath, createVault(TEST_KDF));
   });
 
   afterEach(() => {
@@ -36,7 +39,9 @@ describe('add command', () => {
     passwordPrompt: false,
   });
 
-  it('creates a vault if none exists and adds a variable', async () => {
+  it('creates a vault if none exists and adds a variable', { timeout: 60000 }, async () => {
+    // Remove pre-created test vault so addCommand exercises the "create" path.
+    fs.rmSync(vaultPath, { force: true });
     await addCommand('FOO=bar', {}, opts());
     const v = readVault(vaultPath);
     expect(v.version).toBe(1);
diff --git a/__tests__/commands/get.test.ts b/__tests__/commands/get.test.ts
index 3f41d85..a236260 100644
--- a/__tests__/commands/get.test.ts
+++ b/__tests__/commands/get.test.ts
@@ -4,7 +4,8 @@ import * as path from 'node:path';
 import * as os from 'node:os';
 import { addCommand } from '../../src/commands/add.js';
 import { getCommand } from '../../src/commands/get.js';
-import { TEST_PASSWORD } from '../helpers.js';
+import { createVault, writeVault } from '../../src/vault.js';
+import { TEST_KDF, TEST_PASSWORD } from '../helpers.js';
 import type { GlobalOptions } from '../../src/types.js';
 
 describe('get command', () => {
@@ -25,6 +26,9 @@ describe('get command', () => {
       stdout.push(typeof chunk === 'string' ? chunk : chunk.toString());
       return true;
     }) as typeof process.stdout.write;
+    // Pre-create vault with fast test KDF so addCommand doesn't use
+    // production-grade Argon2id params (which timeout in CI coverage runs).
+    writeVault(vaultPath, createVault(TEST_KDF));
     await addCommand('FOO=bar', {}, opts());
     await addCommand('EMPTY=', {}, opts());
     await addCommand('WITH_NEWLINE=line1\nline2', {}, opts());