# Install gocryptfs with Homebrew, apk, apt, dnf, MacPorts, Nix, pacman, zypper Encrypted overlay filesystem written in Go. Version 2.6.1 via Homebrew; verified 2026-04-20. ## Install ```sh sudo av install brew:gocryptfs ``` Additional install commands: ### macOS - Homebrew (100%): ```sh brew install gocryptfs ``` Evidence: local Homebrew formula metadata - MacPorts (94%): ```sh sudo port install gocryptfs ``` Evidence: MacPorts ports tree: fuse/gocryptfs/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 ### Linux - apk (92%): ```sh sudo apk add gocryptfs ``` Evidence: Alpine Linux edge package indexes: gocryptfs from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz - Debian apt (92%): ```sh sudo apt install gocryptfs ``` Evidence: Debian stable package indexes: gocryptfs from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz - dnf (92%): ```sh sudo dnf install gocryptfs ``` Evidence: Fedora Rawhide package metadata: gocryptfs from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst - Nix (92%): ```sh nix profile install nixpkgs#gocryptfs ``` Evidence: nixpkgs package indexes: pkgs/by-name/go/gocryptfs/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - pacman (92%): ```sh sudo pacman -S gocryptfs ``` Evidence: Arch Linux sync databases: gocryptfs from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz - zypper (92%): ```sh sudo zypper install gocryptfs ``` Evidence: openSUSE Tumbleweed package metadata: gocryptfs from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst ## Package facts - **Package key:** brew:gocryptfs - **Package manager:** Homebrew - **Package manager page:** - **Version:** 2.6.1 - **Source summary:** Encrypted overlay filesystem written in Go - **Homepage:** - **Repository:** - **Upstream docs:** - **License:** MIT - **Source archive:** - **Last updated:** 2026-04-20T18:48:44Z - **Generated:** 2026-07-08T07:18:31+00:00 ## Executables - gocryptfs (cli) - gocryptfs-xray (cli) - gocryptfs (alias) - gocryptfs-xray (alias) ## Dependencies - libfuse - openssl@4 ## Build dependencies - go - pkgconf ## Install behavior - Post-install hook: not defined - Bottle: available on arm64_linux, x86_64_linux ## Freshness - Page generated: 2026-07-08 - Package-manager version: 2.6.1 - Package-manager updated: 2026-04-20 - Local data: ok - Upstream repository: https://github.com/rfjakob/gocryptfs - info: No cached GitHub release or tag data was available. ## Project history and usage gocryptfs is an encrypted FUSE overlay filesystem written in Go. It was designed as an EncFS-inspired tool that fixes security weaknesses while preserving the convenient model of mounting an encrypted directory as a plaintext view. ### Project history The public GitHub repository was created in September 2015. The README says gocryptfs is built on go-fuse, was inspired by EncFS, and strives to fix EncFS security issues while providing good performance. The project reached version 1.0 on July 17, 2016 after stress and correctness testing with fsstress, extractloop, and xfstests. The README also records a March 3, 2017 security audit, signed releases from v0.4 onward, Linux as the native platform, beta-quality macOS support, and a stable CLI ABI for scripts and applications. ### Adoption history gocryptfs spread through the channels expected for a filesystem utility: upstream release binaries, Linux distribution packages, MacPorts, Homebrew, and package-manager metadata for Alpine, Debian, Fedora, Nix, Arch, Ubuntu, and openSUSE in the batch input. Its adoption was helped by a clear operational niche: users wanted per-directory encryption that worked with sync tools and ordinary filesystems without placing trust in a full-disk-encryption layer or a cloud provider. ### How it is used The core workflow is to run `gocryptfs -init CIPHERDIR` and then mount `CIPHERDIR` at a plaintext mount point. The manpage also documents password changes, filesystem checks, info display, reverse mode, deterministic names, speed tests, and other operational flags. gocryptfs stores encrypted data in CIPHERDIR and presents a plaintext view at MOUNTPOINT. Its `gocryptfs.conf` file is part of the encrypted directory metadata, while the password or master key remains the user's responsibility. ### Why package nerds care Package nerds care about gocryptfs because filesystem tools are hard to package well: they touch FUSE, kernel interfaces, release signatures, platform caveats, and data safety. gocryptfs documents those edges unusually directly, including signed releases, security design, stable CLI ABI, benchmark expectations, and config-file recovery advice. It is also a strong example of Go in systems-tool packaging: a single CLI with static-binary potential, distribution packages, and tight interaction with low-level OS facilities. ### Timeline - 2015-09: GitHub repository created. - 2016-07: Version 1.0 reached and declared ready for general consumption. - 2017-03: Security audit completed. - 2021-06: v2.0 released in the release history. - 2025-08: v2.6.1 released. ### Related projects - EncFS is the design predecessor named by gocryptfs. - go-fuse is the FUSE library gocryptfs builds on. - cppcryptfs is the independent Windows reimplementation named in the README. - SiriKali is a graphical frontend that supports gocryptfs. ### Sources - - - - - - ## Security Notes broad file, network, media, or database tool signal. - **Geiger risk:** blue / medium - broad file, network, media, or database tool signal ## Configuration and credential file locations These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval. ## Configuration files - Unix: CIPHERDIR/gocryptfs.conf ## Source Database Details - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** gocryptfs - **Version Scheme:** 0 - **Revision:** 0 - **Head Version:** HEAD - **Requirements:** linux - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** no - **URL Keys:** head, stable ## Other Package-Manager Records - Debian apt - gocryptfs - 2.5.1-2+b1: normalized package name match | Debian stable package indexes: gocryptfs from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | Encrypted overlay filesystem written in Go | https://github.com/rfjakob/gocryptfs - Nix - gocryptfs: normalized package name match | nixpkgs package indexes: pkgs/by-name/go/gocryptfs/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - Ubuntu apt - gocryptfs - 2.4.0-1build3: normalized package name match | Ubuntu 24.04 LTS package indexes: gocryptfs from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | Encrypted overlay filesystem written in Go | https://github.com/rfjakob/gocryptfs - apk - gocryptfs - 2.6.1-r5: normalized package name match | Alpine Linux edge package indexes: gocryptfs from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | Encrypted overlay filesystem written in Go | https://github.com/rfjakob/gocryptfs - apk - gocryptfs-doc - 2.6.1-r5: normalized package name match | Alpine Linux edge package indexes: gocryptfs-doc from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | Encrypted overlay filesystem written in Go (documentation) | https://github.com/rfjakob/gocryptfs - dnf - gocryptfs - 2.6.1-5.fc44: normalized package name match | Fedora Rawhide package metadata: gocryptfs from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst | Encrypted overlay filesystem written in Go | https://github.com/rfjakob/gocryptfs - pacman - gocryptfs - 2.6.1-1: normalized package name match | Arch Linux sync databases: gocryptfs from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz | Encrypted overlay filesystem written in Go. | https://github.com/rfjakob/gocryptfs - zypper - gocryptfs - 2.6.1-1.5: normalized package name match | openSUSE Tumbleweed package metadata: gocryptfs from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst | Encrypted overlay filesystem written in Go | https://nuetzlich.net/gocryptfs/ - zypper - gocryptfs-doc - 2.6.1-1.5: normalized package name match | openSUSE Tumbleweed package metadata: gocryptfs-doc from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst | Documentation for gocryptfs | https://nuetzlich.net/gocryptfs/ - MacPorts - gocryptfs: normalized package name match | MacPorts ports tree: fuse/gocryptfs/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 ## Related links - [Secret-risk packages](https://www.automicvault.com/pkg/secret-risk-packages/) - Has protected-tool coverage, approval-gate, or non-low Geiger security signals. - [Terminal utility packages](https://www.automicvault.com/pkg/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [Language runtime packages](https://www.automicvault.com/pkg/language-runtime-packages/) - Matched language runtime, compiler, or interpreter metadata. - [Networking and protocol packages](https://www.automicvault.com/pkg/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata. - [libfuse](https://www.automicvault.com/pkg/brew/libfuse/) - Runtime dependency declared by Homebrew. - [openssl@4](https://www.automicvault.com/pkg/brew/openssl-4/) - Runtime dependency declared by Homebrew. - [go](https://www.automicvault.com/pkg/brew/go/) - Build dependency declared by Homebrew. - [pkgconf](https://www.automicvault.com/pkg/brew/pkgconf/) - Build dependency declared by Homebrew. - [cryfs](https://www.automicvault.com/pkg/brew/cryfs/) - Shares av.db curated category or tags: cli, encryption, filesystem, fuse, security. - [dislocker](https://www.automicvault.com/pkg/brew/dislocker/) - Shares av.db curated category or tags: cli, encryption, filesystem, fuse, security. - [encfs](https://www.automicvault.com/pkg/brew/encfs/) - Shares av.db curated category or tags: cli, encryption, filesystem, fuse, security. - [git-crypt](https://www.automicvault.com/pkg/brew/git-crypt/) - Shares av.db curated category or tags: cli, encryption, security. - [git-remote-gcrypt](https://www.automicvault.com/pkg/brew/git-remote-gcrypt/) - Shares av.db curated category or tags: cli, encryption, security. - [shush](https://www.automicvault.com/pkg/brew/shush/) - Shares av.db curated category or tags: cli, encryption, security. - [ssh-vault](https://www.automicvault.com/pkg/brew/ssh-vault/) - Shares av.db curated category or tags: cli, encryption, security. - [transcrypt](https://www.automicvault.com/pkg/brew/transcrypt/) - Shares av.db curated category or tags: cli, encryption, security. ## Combined YAML source View the package source record on GitHub. [combined/gocryptfs.yml](https://github.com/automic-vault/db/blob/main/combined/gocryptfs.yml) ## Sources - Nucleus package database - Geiger risk classifier - package-page enrichment - curated configuration and credential file locations - curated package history - package version freshness - av.db category and tag curation - package relationship graph - external package-manager database matches - cross-ecosystem install command graph