# Install encfs with Homebrew, apk, apt, dnf, MacPorts, pacman, zypper Encrypted pass-through FUSE file system. Version 1.9.5 via Homebrew; verified 2026-06-21. ## Install ```sh sudo av install brew:encfs ``` Additional install commands: ### macOS - Homebrew (100%): ```sh brew install encfs ``` Evidence: local Homebrew formula metadata - MacPorts (94%): ```sh sudo port install encfs ``` Evidence: MacPorts ports tree: fuse/encfs/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 ### Linux - apk (92%): ```sh sudo apk add encfs ``` Evidence: Alpine Linux edge package indexes: encfs from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz - Debian apt (92%): ```sh sudo apt install encfs ``` Evidence: Debian stable package indexes: encfs from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz - dnf (92%): ```sh sudo dnf install fuse-encfs ``` Evidence: Fedora Rawhide package metadata: fuse-encfs from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst - pacman (92%): ```sh sudo pacman -S encfs ``` Evidence: Arch Linux sync databases: encfs from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz - zypper (92%): ```sh sudo zypper install encfs ``` Evidence: openSUSE Tumbleweed package metadata: encfs from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst ## Package facts - **Package key:** brew:encfs - **Package manager:** Homebrew - **Package manager page:** - **Version:** 1.9.5 - **Source summary:** Encrypted pass-through FUSE file system - **Homepage:** - **Repository:** - **Upstream docs:** - **License:** GPL-3.0-or-later - **Source archive:** - **Last updated:** 2026-06-21T20:12:11-04:00 - **Generated:** 2026-07-08T07:18:31+00:00 ## Executables - encfs (cli) - encfsctl (cli) - encfssh (cli) - encfs (alias) - encfsctl (alias) - encfssh (alias) ## Dependencies - libfuse@2 - openssl@4 - tinyxml2 ## Build dependencies - cmake - gettext - pkgconf ## Install behavior - Post-install hook: not defined - Bottle: available on arm64_linux, x86_64_linux ## Freshness - Page generated: 2026-07-08 - Package-manager version: 1.9.5 - Package-manager updated: 2026-06-21 - Local data: ok - Upstream repository: https://github.com/vgough/encfs - Upstream latest detected: v1.9.5 (current) ## Project history and usage EncFS is an encrypted userspace filesystem built on FUSE. It stores encrypted files in one directory while exposing plaintext through a mounted directory, making it a familiar Unix tool for per-directory encryption rather than full-disk encryption. ### Project history The EncFS README says it was first released in 2003, when FUSE was still young and kernel-module encrypted filesystems were harder to keep working across Linux upgrades. The author describes writing it as a CFS replacement for personal use and then releasing it as open source. The project later became mature but mostly dormant. As of the README's February 2026 status note, the old C++ implementation had been removed from the main line and a Rust port was underway, with functional but alpha-status support and a warning to keep backups. ### Adoption history EncFS found a place among Linux and Unix users who wanted encrypted directories without repartitioning disks or managing block devices. Its design also fit backup and sync workflows because encrypted filenames and encrypted file contents remain visible as ordinary files to the underlying filesystem. The README is cautious about new deployments and points readers to newer alternatives such as GoCryptFS or full-disk encryption. That caution is part of EncFS's modern history: it remains important for existing data and compatibility, but it is no longer the default recommendation for fresh encrypted storage. ### How it is used The traditional workflow is to create or mount an encrypted root directory and a plaintext mount point with `encfs encrypted-dir mount-dir`. The control file in the encrypted directory identifies an existing filesystem; otherwise EncFS prompts to create one. The design document explains that a volume key encrypts filenames and file contents, while the user's password protects that volume key. `encfsctl` exists for inspecting filesystems and changing the password without re-encrypting all stored data. ### Why package nerds care EncFS is package-nerd significant because it sits at the awkward intersection of FUSE, crypto defaults, config-file compatibility, and old user data. The design document tracks several historical config formats, from `.encfs3` through `.encfs6.xml` and the newer v7 protobuf formats, which makes version behavior matter. It is also a good example of a package that should not be summarized as simply 'encryption tool.' The README's own warning about newer alternatives and alpha Rust status is operationally important for users deciding whether they are mounting old data or starting something new. ### Timeline - 2003: EncFS first released as an early FUSE encrypted filesystem. - 2014: Current public GitHub repository created. - Pre-2026: C++ EncFS became mature but mostly dormant. - 2026: Rust port documented as functional but alpha, with new v7 config, Argon2id, and AES-GCM-SIV work. ### Related projects - FUSE is the userspace filesystem layer EncFS depends on. - CFS is cited by the author as the older encrypted filesystem EncFS replaced for his own use. - GoCryptFS is explicitly recommended by the README as a newer alternative for new encrypted filesystems. - Full-disk encryption is mentioned by the README as another preferred option when possible. ### Sources - - - - ## Security Notes broad file, network, media, or database tool signal. - **Geiger risk:** blue / medium - broad file, network, media, or database tool signal ## Configuration and credential file locations These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval. ## Configuration files - Unix: .encfs6.xml ## Source Database Details - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** encfs - **Version Scheme:** 0 - **Revision:** 5 - **Head Version:** HEAD - **Requirements:** linux - **Bottle Stable Root URL:** - **Deprecated:** yes - **Disabled:** no - **Keg Only:** no - **URL Keys:** head, stable ## Other Package-Manager Records - Debian apt - encfs - 1.9.5-3: normalized package name match | Debian stable package indexes: encfs from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | encrypted virtual filesystem | https://vgough.github.io/encfs/ - Ubuntu apt - encfs - 1.9.5-2ubuntu3: normalized package name match | Ubuntu 24.04 LTS package indexes: encfs from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | encrypted virtual filesystem | https://vgough.github.io/encfs/ - apk - encfs - 1.9.5-r25: normalized package name match | Alpine Linux edge package indexes: encfs from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | EncFS provides an encrypted filesystem in user-space | https://vgough.github.io/encfs/ - apk - encfs-doc - 1.9.5-r25: normalized package name match | Alpine Linux edge package indexes: encfs-doc from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | EncFS provides an encrypted filesystem in user-space (documentation) | https://vgough.github.io/encfs/ - apk - encfs-lang - 1.9.5-r25: normalized package name match | Alpine Linux edge package indexes: encfs-lang from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | Languages for package encfs | https://vgough.github.io/encfs/ - apk - encfs-libs - 1.9.5-r25: normalized package name match | Alpine Linux edge package indexes: encfs-libs from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | EncFS provides an encrypted filesystem in user-space (libraries) | https://vgough.github.io/encfs/ - dnf - fuse-encfs - 1.9.5-28.fc44: normalized package name match | Fedora Rawhide package metadata: fuse-encfs from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst | Encrypted pass-thru filesystem in userspace | https://github.com/vgough/encfs - pacman - encfs - 1.9.5-9: normalized package name match | Arch Linux sync databases: encfs from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz | Encrypted filesystem in user-space | https://vgough.github.io/encfs/ - zypper - encfs - 1.9.5-4.3: normalized package name match | openSUSE Tumbleweed package metadata: encfs from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst | Userspace Encrypted File System | https://vgough.github.io/encfs/ - zypper - encfs-lang - 1.9.5-4.3: normalized package name match | openSUSE Tumbleweed package metadata: encfs-lang from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst | Translations for package encfs | https://vgough.github.io/encfs/ - MacPorts - encfs: normalized package name match | MacPorts ports tree: fuse/encfs/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 ## Related links - [Source-control packages](https://www.automicvault.com/pkg/source-control-tools/) - Belongs to a source-control command family. - [Secret-risk packages](https://www.automicvault.com/pkg/secret-risk-packages/) - Has protected-tool coverage, approval-gate, or non-low Geiger security signals. - [Terminal utility packages](https://www.automicvault.com/pkg/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [Networking and protocol packages](https://www.automicvault.com/pkg/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata. - [openssl@4](https://www.automicvault.com/pkg/brew/openssl-4/) - Runtime dependency declared by Homebrew. - [cmake](https://www.automicvault.com/pkg/brew/cmake/) - Build dependency declared by Homebrew. - [gettext](https://www.automicvault.com/pkg/brew/gettext/) - Build dependency declared by Homebrew. - [pkgconf](https://www.automicvault.com/pkg/brew/pkgconf/) - Build dependency declared by Homebrew. - [cryfs](https://www.automicvault.com/pkg/brew/cryfs/) - Shares av.db curated category or tags: cli, encryption, filesystem, fuse, security. - [dislocker](https://www.automicvault.com/pkg/brew/dislocker/) - Shares av.db curated category or tags: cli, encryption, filesystem, fuse, security. - [gocryptfs](https://www.automicvault.com/pkg/brew/gocryptfs/) - Shares av.db curated category or tags: cli, encryption, filesystem, fuse, security. - [enchive](https://www.automicvault.com/pkg/brew/enchive/) - Shares av.db curated category or tags: cli, encryption, security. - [git-crypt](https://www.automicvault.com/pkg/brew/git-crypt/) - Shares av.db curated category or tags: cli, encryption, security. - [git-remote-gcrypt](https://www.automicvault.com/pkg/brew/git-remote-gcrypt/) - Shares av.db curated category or tags: cli, encryption, security. - [grype](https://www.automicvault.com/pkg/brew/grype/) - Shares av.db curated category or tags: cli, filesystem, security. - [nettle](https://www.automicvault.com/pkg/brew/nettle/) - Shares av.db curated category or tags: cli, encryption, security. - [securefs](https://www.automicvault.com/pkg/brew/securefs/) - Security-sensitive metadata or terminology overlaps. Shared terms: cli, encrypted, encryption, filesystem, fuse. ## Combined YAML source View the package source record on GitHub. [combined/encfs.yml](https://github.com/automic-vault/db/blob/main/combined/encfs.yml) ## Sources - Nucleus package database - Geiger risk classifier - package-page enrichment - curated configuration and credential file locations - curated package history - package version freshness - av.db category and tag curation - package relationship graph - external package-manager database matches - cross-ecosystem install command graph