macOS
Homebrewverified · 100%
brew install cryfslocal Homebrew formula metadata
MacPortsverified · 94%
sudo port install cryfsMacPorts ports tree · fuse/cryfs/Portfile · source: api.github.com
brew
Install cryfs with Homebrew, apt, dnf, MacPorts, Nix, pacman, zypper
Encrypts your files so you can safely store them in Dropbox, iCloud, etc. Version 1.0.3 via Homebrew; verified 2026-06-21.
install
Additional install commands
Linux
Debian aptverified · 92%
sudo apt install cryfsDebian stable package indexes · cryfs · source: deb.debian.org
Fedora dnfverified · 92%
sudo dnf install cryfsFedora Rawhide package metadata · cryfs · source: dl.fedoraproject.org
Nixverified · 92%
nix profile install nixpkgs#cryfsnixpkgs package indexes · pkgs/by-name/cr/cryfs/package.nix · source: api.github.com
Arch Linux pacmanverified · 92%
sudo pacman -S cryfsArch Linux sync databases · cryfs · source: geo.mirror.pkgbuild.com
openSUSE zypperverified · 92%
sudo zypper install cryfsopenSUSE Tumbleweed package metadata · cryfs · source: download.opensuse.org
overview
Package summary
Encrypts your files so you can safely store them in Dropbox, iCloud, etc.
Project links
Commands and aliases
- cryfs
- cryfs-unmount
history
Project history and usage
CryFS is an encrypted filesystem aimed at storing data safely on cloud-sync services. In package-manager terms it sits at the intersection of FUSE filesystem tooling, local encryption utilities, and privacy-oriented desktop workflows.
Project history
CryFS was published as an open-source cryptographic filesystem for the cloud, with its official site describing a design that encrypts content, filenames, directory structure, timestamps, and other metadata into fixed-size encrypted blocks. The official technical page cites a 2015 master's thesis and a 2017 DBSec publication for the security analysis behind the design.
Adoption history
The upstream README documents distribution through apt, pacman, Homebrew, MacPorts, Nix, and experimental Windows builds, and also mentions GUI integrations such as SiriKali and KDE Plasma Vault. That breadth explains why package managers carry CryFS even though it is a specialized filesystem tool: users need it installed close to the operating system, FUSE layer, and desktop integration points.
How it is used
A typical CryFS workflow creates a vault directory, stores an encrypted configuration file named cryfs.config there, and mounts decrypted contents through the cryfs command. Its cloud-storage focus is visible in the official examples naming Dropbox, iCloud, OneDrive, and similar services, while the docs warn about non-concurrent use and corruption risks if multiple devices or sync clients write at the same time.
Why package nerds care
CryFS matters to packagers because it pulls ordinary package management into filesystem integration: macOS users need macFUSE, Linux users need FUSE support, Windows builds use DokanY, and the project has historically cared about distro packages as first-class install routes. The package is therefore more than a binary drop; it is a small filesystem stack with platform-specific runtime expectations.
Timeline
- 2015: The official security-analysis page cites the CryFS master's thesis.
- 2017: The official site cites a DBSec publication on the CryFS construction.
- 2024: CryFS 1.0.0 was published on the official GitHub releases page.
- 2025: The 1.0.x and 2.0.0-alpha release lines were active on GitHub.
Related projects
- The CryFS documentation contrasts its block-based metadata-hiding approach with file-based encrypted filesystems such as EncFS and gocryptfs, and the README points to SiriKali and KDE Plasma Vault as GUI front ends that can use CryFS.
Sources
security posture
Risk level: orange
broad file, network, media, or database tool signal. infrastructure mutation or orchestration signal.
Risk classifier
orange risk · medium confidence · infrastructure
Why
- broad file, network, media, or database tool signal
- infrastructure mutation or orchestration signal
Signals
- text:cloud
- text:encrypt
Install behavior
- No Homebrew post-install hook is recorded in formula metadata.
- Homebrew bottle metadata is available for 2 platform targets.
- Installs with 4 runtime dependencies.
- Build metadata lists 5 build dependencies.
Recommended review
Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.
local files
Configuration and credential file locations
These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.
Configuration files
Config paths the tool may read or write during local use.
- Unix
vaultdir/cryfs.config
executables
Installed executables
| Command | Kind | Exposure | Note |
|---|---|---|---|
cryfs | cli | global executable | |
cryfs-unmount | cli | global executable |
freshness
Version and freshness
These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.
page generated2026-07-08
manager version1.0.3
manager updated2026-06-21
local dataok
upstreamnot checked
latest detectednot detected
https://github.com/cryfs/cryfs
- infoNo cached GitHub release or tag data was available.https://github.com/cryfs/cryfsnone confidence
install metadata
Package metadata
| Package key | brew:cryfs |
|---|---|
| Version | 1.0.3 |
| Package manager | Homebrew |
| Package manager page | https://formulae.brew.sh/formula/cryfs |
| Homepage | https://www.cryfs.org |
| Repository | https://github.com/cryfs/cryfs |
| Upstream docs | https://www.cryfs.org/howitworks |
| License | LGPL-3.0-or-later |
| Source archive | https://github.com/cryfs/cryfs/releases/download/1.0.3/cryfs-1.0.3.tar.gz |
| Last updated | 2026-06-21T20:12:11-04:00 |
| Pulse | updated |
| Dependencies | boost, fmt, libfuse@2, spdlog |
| Build dependencies | cmake, curl, pkgconf, python@3.14, range-v3 |
| Bottle | available (on arm64_linux, x86_64_linux) |
| Homebrew post-install | not defined |
| Service | none declared |
registry facts
Source database details
| Source Database | Homebrew formula API |
|---|---|
| Tap | homebrew/core |
| Full Name | cryfs |
| Version Scheme | 0 |
| Revision | 1 |
| Head Version | HEAD |
| Requirements |
|
| Bottle Stable Root URL | https://ghcr.io/v2/homebrew/core |
| Deprecated | yes |
| Disabled | no |
| Keg Only | no |
| URL Keys |
|
source database matches
Other package-manager records
Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.
Debian apt95%
cryfs 0.11.4-3
encrypt your files and store them in the cloud
sudo apt install cryfs- Section: utils
- Architecture: amd64
- 13 dependencies
- normalized package name match
- Matched by: Cryfs
Nix95%
cryfs
nix profile install nixpkgs#cryfs- normalized package name match
- Matched by: Cryfs
Ubuntu apt95%
cryfs 0.11.4-1build5
encrypt your files and store them in the cloud
sudo apt install cryfs- Section: universe/utils
- Architecture: amd64
- 13 dependencies
- normalized package name match
- Matched by: Cryfs
dnf95%
cryfs 0.11.3-15.fc44
Cryptographic filesystem for the cloud
sudo dnf install cryfs- License: LGPL-3.0-only
- Category: Unspecified
- Architecture: x86_64
- Source Package: cryfs
- 14 dependencies
- 1 provides
- normalized package name match
- Matched by: Cryfs
pacman95%
cryfs 1.0.3-5
Cryptographic filesystem for the cloud
sudo pacman -S cryfs- License: LGPL-3.0-only
- Architecture: x86_64
- 8 dependencies
- normalized package name match
- Matched by: Cryfs
zypper95%
cryfs 1.0.3-1.6
Cryptographic filesystem for the cloud
sudo zypper install cryfs- License: LGPL-3.0-only
- Category: Unspecified
- Architecture: x86_64
- Source Package: cryfs
- 12 dependencies
- 2 provides
- normalized package name match
- Matched by: Cryfs
MacPorts95%
cryfs
sudo port install cryfs- normalized package name match
- Matched by: Cryfs
source trail
Generated from repository data
This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.
Combined YAML source
View the package source record on GitHub.
Used sources
- Geiger risk classifier
- Nucleus package database
- av.db category and tag curation
- cross-ecosystem install command graph
- curated configuration and credential file locations
- curated package history
- external package-manager database matches
- package relationship graph
- package version freshness
- package-page enrichment