# Install fnox with Homebrew, MacPorts Fort Knox for your secrets - flexible secret management tool. Version 1.29.0 via Homebrew; verified 2026-07-02. ## Install ```sh sudo av install brew:fnox ``` Additional install commands: ### macOS - Homebrew (100%): ```sh brew install fnox ``` Evidence: local Homebrew formula metadata - MacPorts (94%): ```sh sudo port install fnox ``` Evidence: MacPorts ports tree: security/fnox/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 ## Package facts - **Package key:** brew:fnox - **Package manager:** Homebrew - **Package manager page:** - **Version:** 1.29.0 - **Source summary:** Fort Knox for your secrets - flexible secret management tool - **Homepage:** - **Repository:** - **Upstream docs:** - **License:** MIT - **Source archive:** - **Last updated:** 2026-07-02T00:17:39Z - **Generated:** 2026-07-08T07:18:31+00:00 ## Executables - fnox (cli) - fnox (alias) ## Dependencies - usage ## Build dependencies - pkgconf - rust ## Install behavior - Post-install hook: not defined - Bottle: available on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux ## Freshness - Page generated: 2026-07-08 - Package-manager version: 1.29.0 - Package-manager updated: 2026-07-02 - Local data: ok - Upstream repository: https://github.com/jdx/fnox - Upstream latest detected: v1.29.0 (current) ## Project history and usage fnox is a developer-focused secrets-management CLI from jdx. Its official README describes it as 'Fort Knox for your secrets' and presents a unified interface for encrypted-in-git secrets and remote cloud or password-manager secret stores. ### Project history fnox follows the pattern of project-local developer tooling: a `fnox.toml` file declares providers and secrets, and the CLI can initialize a project, set or get secrets, execute commands with secrets loaded, and activate shell integration. The official README also notes sponsorship by 37signals. ### Adoption history The supplied package metadata lists Homebrew and MacPorts packaging. The official README recommends installation through mise and also documents Cargo and source installation, tying fnox to the broader jdx/mise developer-tooling ecosystem. ### How it is used fnox supports encrypted secrets using age and cloud KMS systems, remote secrets in AWS, Azure, GCP, 1Password, Bitwarden, Infisical, Vault, and Doppler, plus local keychain and password-store providers. Common usage is `fnox init`, `fnox set`, `fnox get`, `fnox exec`, and shell activation. ### Why package nerds care fnox is notable for package managers because it packages a fast-moving secret manager with many external provider integrations into a single CLI. It sits at the intersection of encrypted repository secrets, cloud secret stores, password managers, and shell-driven developer workflows. ### Timeline - Current: Official README documents encrypted-in-git and remote-cloud secret storage modes. - Current: Official README recommends mise installation and documents Cargo and source installation. - Current: Supplied package metadata lists Homebrew and MacPorts packages. ### Related projects - fnox is related to mise, age, AWS KMS, Azure Key Vault, GCP KMS, AWS Secrets Manager, AWS Parameter Store, GCP Secret Manager, 1Password, Bitwarden, Infisical, HashiCorp Vault, Doppler, KeePass, and Unix pass. ### Sources - - - - - ## Security Notes No matching local secret-handling manifest was found for fnox. Nucleus package metadata is still published here so future coverage has a stable package URL. ## Configuration and credential file locations These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval. ## Configuration files - Unix: ./fnox.toml ## Credential files - Unix: ./fnox.toml ## Source Database Details - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** fnox - **Version Scheme:** 0 - **Revision:** 0 - **Head Version:** HEAD - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** no - **URL Keys:** head, stable ## Other Package-Manager Records - MacPorts - fnox: normalized package name match | MacPorts ports tree: security/fnox/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 ## Related links - [Terminal utility packages](https://www.automicvault.com/pkg/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [Networking and protocol packages](https://www.automicvault.com/pkg/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata. - [Security and crypto packages](https://www.automicvault.com/pkg/security-crypto-tools/) - Matched security, identity, cryptography, password, signing, or certificate metadata. - [Productivity CLI packages](https://www.automicvault.com/pkg/productivity-cli-packages/) - Matched curated productivity category metadata from av.db. - [usage](https://www.automicvault.com/pkg/brew/usage/) - Runtime dependency declared by Homebrew. - [pkgconf](https://www.automicvault.com/pkg/brew/pkgconf/) - Build dependency declared by Homebrew. - [rust](https://www.automicvault.com/pkg/brew/rust/) - Build dependency declared by Homebrew. - [git-secret](https://www.automicvault.com/pkg/brew/git-secret/) - Shares av.db curated category or tags: cli, encryption, secrets, secrets-management, security. - [shush](https://www.automicvault.com/pkg/brew/shush/) - Shares av.db curated category or tags: cli, encryption, secrets, secrets-management, security. - [doppler](https://www.automicvault.com/pkg/brew/doppler/) - Shares av.db curated category or tags: cli, secrets, secrets-management, security. - [ksops](https://www.automicvault.com/pkg/brew/ksops/) - Shares av.db curated category or tags: cli, secrets, secrets-management, security. - [openbao](https://www.automicvault.com/pkg/brew/openbao/) - Shares av.db curated category or tags: cli, encryption, secrets-management, security. - [ripsecrets](https://www.automicvault.com/pkg/brew/ripsecrets/) - Shares av.db curated category or tags: cli, secrets, secrets-management, security. - [sops](https://www.automicvault.com/pkg/brew/sops/) - Shares av.db curated category or tags: cli, encryption, secrets-management, security. - [teller](https://www.automicvault.com/pkg/brew/teller/) - Shares av.db curated category or tags: cli, secrets, secrets-management, security. ## Combined YAML source View the package source record on GitHub. [combined/fnox.yml](https://github.com/automic-vault/db/blob/main/combined/fnox.yml) ## Sources - Nucleus package database - Geiger risk classifier - package-page enrichment - curated configuration and credential file locations - curated package history - package version freshness - av.db category and tag curation - package relationship graph - external package-manager database matches - cross-ecosystem install command graph