# Install age-plugin-se with Homebrew, MacPorts, Nix Age plugin for Apple Secure Enclave. Version 0.1.4 via Homebrew; verified 2026-05-12. ## Install ```sh sudo av install brew:age-plugin-se ``` Additional install commands: ### macOS - Homebrew (100%): ```sh brew install age-plugin-se ``` Evidence: local Homebrew formula metadata - MacPorts (94%): ```sh sudo port install age-plugin-se ``` Evidence: MacPorts ports tree: security/age-plugin-se/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 ### Linux - Nix (92%): ```sh nix profile install nixpkgs#age-plugin-se ``` Evidence: nixpkgs package indexes: pkgs/by-name/ag/age-plugin-se/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 ## Package facts - **Package key:** brew:age-plugin-se - **Package manager:** Homebrew - **Package manager page:** - **Version:** 0.1.4 - **Source summary:** Age plugin for Apple Secure Enclave - **Homepage:** - **Repository:** - **Upstream docs:** - **License:** MIT - **Source archive:** - **Last updated:** 2026-05-12T14:59:16+01:00 - **Generated:** 2026-07-08T07:18:31+00:00 ## Executables - age-plugin-se (cli) - age-plugin-se (alias) ## Build dependencies - scdoc ## Install behavior - Post-install hook: not defined - Bottle: available on arm64_sequoia, arm64_sonoma, arm64_tahoe, arm64_ventura, sonoma, ventura ## Freshness - Page generated: 2026-07-08 - Package-manager version: 0.1.4 - Package-manager updated: 2026-05-12 - Local data: ok - Upstream repository: https://github.com/remko/age-plugin-se - Upstream latest detected: v0.1.4 (current) ## Project history and usage age-plugin-se is an age plugin that binds age identities to Apple's Secure Enclave, giving age users a way to decrypt files with device-bound keys and macOS biometric or passcode access control. ### Project history The project was created by Remko Troncon in January 2023 and is implemented as a plugin for the age encryption ecosystem. Its README presents the tool as a Secure Enclave bridge for age, with examples using `age-plugin-se keygen`, age recipients, and normal `age --decrypt -i` workflows. Early public releases in 2023 were marked as prereleases. Version 0.1.0 followed in April 2024, and later releases added packaging and compatibility work. By the 0.2.x line in December 2025, the README also documented conversion from `age1se` recipients to age plugin-tag recipients, reflecting age's broader plugin-recipient evolution. ### Adoption history Official installation instructions lead with Homebrew and prebuilt binaries, with Alpine packages also published from the upstream release page. The supplied package metadata shows the tool packaged in Homebrew, MacPorts, and Nix, which fits its niche: a macOS-first security utility that package managers make easy to install on developer machines. ### How it is used The core workflow is to generate an identity with `age-plugin-se keygen`, encrypt to the printed public recipient using `age`, and decrypt on the matching Secure Enclave machine by passing the identity file to age. The README emphasizes that the private key is bound to the device and recommends encrypting long-term data to a backup key as well. The README also documents use with Passage, the file-based password manager built around age, so users can unlock password-store entries with Touch ID while retaining an ordinary age backup identity. ### Why package nerds care For package nerds, age-plugin-se is interesting because it is a small plugin that turns Apple's hardware-backed key storage into a Unix-style age recipient. It is also a good example of the age plugin model spreading beyond software-only key files into platform security hardware. ### Timeline - 2023: GitHub repository created. - 2023: First prerelease builds published. - 2024: v0.1.0 released. - 2025: v0.2.x releases published with the project still focused on Secure Enclave age identities. ### Related projects - age provides the file-encryption tool and plugin mechanism. - Passage is documented by the upstream README as a password-manager use case. - age-plugin-yubikey is a sibling hardware-backed age plugin for PIV tokens. ### Sources - official GitHub releases API - official GitHub repository metadata - source_facts.package-manager - upstream README ## Security Notes narrow executable package without higher-risk signals. - **Geiger risk:** green / low - narrow executable package without higher-risk signals ## Source Database Details - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** age-plugin-se - **Version Scheme:** 0 - **Revision:** 0 - **Head Version:** HEAD - **Requirements:** macos, xcode - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** no - **URL Keys:** head, stable ## Other Package-Manager Records - Nix - age-plugin-se: normalized package name match | nixpkgs package indexes: pkgs/by-name/ag/age-plugin-se/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - MacPorts - age-plugin-se: normalized package name match | MacPorts ports tree: security/age-plugin-se/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 ## Related links - [Source-control packages](https://www.automicvault.com/pkg/source-control-tools/) - Belongs to a source-control command family. - [Terminal utility packages](https://www.automicvault.com/pkg/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [Networking and protocol packages](https://www.automicvault.com/pkg/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata. - [Security and crypto packages](https://www.automicvault.com/pkg/security-crypto-tools/) - Matched security, identity, cryptography, password, signing, or certificate metadata. - [scdoc](https://www.automicvault.com/pkg/brew/scdoc/) - Build dependency declared by Homebrew. - [age-plugin-yubikey](https://www.automicvault.com/pkg/brew/age-plugin-yubikey/) - Shares av.db curated category or tags: age, cli, cryptography, encryption, security. - [aescrypt](https://www.automicvault.com/pkg/brew/aescrypt/) - Shares av.db curated category or tags: cli, cryptography, encryption, security. - [aespipe](https://www.automicvault.com/pkg/brew/aespipe/) - Shares av.db curated category or tags: cli, cryptography, encryption, security. - [age](https://www.automicvault.com/pkg/brew/age/) - Shares av.db curated category or tags: cli, cryptography, encryption, security. - [ccrypt](https://www.automicvault.com/pkg/brew/ccrypt/) - Shares av.db curated category or tags: cli, cryptography, encryption, security. - [gnupg](https://www.automicvault.com/pkg/brew/gnupg/) - Shares av.db curated category or tags: cli, cryptography, encryption, security. - [nettle](https://www.automicvault.com/pkg/brew/nettle/) - Shares av.db curated category or tags: cli, cryptography, encryption, security. - [scrypt](https://www.automicvault.com/pkg/brew/scrypt/) - Shares av.db curated category or tags: cli, cryptography, encryption, security. - [jose](https://www.automicvault.com/pkg/brew/jose/) - Security-sensitive metadata or terminology overlaps. Shared terms: cli, cryptography, encryption, security. ## Combined YAML source View the package source record on GitHub. [combined/age-plugin-se.yml](https://github.com/automic-vault/db/blob/main/combined/age-plugin-se.yml) ## Sources - Nucleus package database - Geiger risk classifier - package-page enrichment - curated package history - package version freshness - av.db category and tag curation - package relationship graph - external package-manager database matches - cross-ecosystem install command graph