# 使用 Homebrew, apt, MacPorts, Nix 安装 gokey

查看 gokey 的安装路径、可执行文件、元数据以及面向 AI 代理工作流的安全说明。

## 安装

```sh
sudo av install brew:gokey
```

其他安装命令:

### macOS

- Homebrew (100%):

```sh
brew install gokey
```

  证据: local Homebrew formula metadata

- MacPorts (94%):

```sh
sudo port install gokey
```

  证据: MacPorts ports tree: security/gokey/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1

### Linux

- Debian apt (92%):

```sh
sudo apt install gokey
```

  证据: Debian stable package indexes: gokey from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz

- Nix (92%):

```sh
nix profile install nixpkgs#gokey
```

  证据: nixpkgs package indexes: pkgs/by-name/go/gokey/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

## 软件包事实

- **软件包键:** brew:gokey
- **软件包管理器:** Homebrew
- **软件包管理器页面:** <https://formulae.brew.sh/formula/gokey>
- **版本:** 0.2.1
- **来源摘要:** Simple vaultless password manager in Go
- **主页:** <https://github.com/cloudflare/gokey>
- **仓库:** <https://github.com/cloudflare/gokey>
- **上游文档:** <https://github.com/cloudflare/gokey#readme>
- **许可证:** BSD-3-Clause
- **源码归档:** <https://github.com/cloudflare/gokey/archive/refs/tags/v0.2.1.tar.gz>
- **已生成:** 2026-07-08T18:08:21+00:00

## 可执行文件

- gokey (cli)
- gokey (别名)

## 构建依赖

- go
- go-md2man

## 安装行为

- post-install 钩子: 未定义
- Bottle: 可用 于 arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux

## 版本和新鲜度

- 页面生成时间: 2026-07-08
- 管理器版本: 0.2.1
- 本地数据: OK
- 上游仓库: https://github.com/cloudflare/gokey
- 检测到的最新版本: v0.2.1 (当前)
- 信息: No package-manager update timestamp was available.
## 项目历史与用法

gokey is Cloudflare's vaultless password manager written in Go. Instead of storing passwords in a vault, it derives passwords and keys from a master password plus a realm string, with optional encrypted seed-file mode for higher-entropy material.

The project sits in the deterministic-password-manager family: the user keeps a master secret and recreates site-specific outputs rather than synchronizing a password database.

### 项目历史

The repository begins in October 2016 with an initial release. The README describes simple password derivation, seed-file mode, and support for output types including passwords, raw bytes, ECC keys, RSA keys, x25519, and ed25519.

Early history focused on random-generation internals and command behavior. Later history includes release-binary automation, dependency updates, imported deterministic key-generation logic from Go's crypto packages, and seed unwrap testing.

### 采用历史

gokey's adoption is mostly that of a compact security utility: it is useful to users who do not want to store, back up, or synchronize a password vault. The README emphasizes that generated passwords are available wherever the user can provide the same master password and realm.

The input package facts list Homebrew, Debian, MacPorts, Nix, and Ubuntu package names, which indicates distribution through both macOS-focused and Linux distribution channels.

### 使用方式

In simple mode, a user runs gokey with a master password and a realm such as a resource URL. Changing the realm derives a different output while keeping the same master password.

For higher-entropy passwords or private keys, the README documents seed-file mode: generate an encrypted seed file, protect it with the master password, and derive passwords or keys from the seed plus realm. Seed paths are command inputs rather than a fixed credentials-file location.

### 为什么软件包爱好者会关心

gokey matters to package nerds because it is a small, auditable-feeling security CLI with no vault service, database daemon, or sync dependency. Its packaging footprint is a single Go command, but its security model lives in deterministic derivation choices.

It is also a useful contrast with mainstream password managers: packaging the tool is easy, while the hard part is documenting the operational warning that losing the master password or seed file loses the derived outputs.

### 时间线

- 2016: Repository begins with an initial release.
- 2016: Early commits change random-generation internals and output conditioning.
- 2022: Release-binary publishing through GitHub Actions is added.
- 2023: Deterministic key-generation logic from Go crypto packages is imported.
- 2026: v0.2.1 tag appears with public KeyGen RNG member work.

### Related projects

- Go's crypto packages are related through key-generation behavior referenced in repository history.
- Deterministic password managers are the broader tool family; gokey's distinguishing feature is combining password and private-key derivation in a Go CLI.
- Cloudflare is the upstream organization that publishes the repository.

### 来源

- <https://github.com/cloudflare/gokey>
- <https://github.com/cloudflare/gokey#readme>
- <https://github.com/cloudflare/gokey/releases>


## 安全说明

narrow executable package without higher-risk signals.

- **Geiger 风险:** 绿色 / 低
- narrow executable package without higher-risk signals

## 源数据库详情

- **Source Database:** Homebrew formula API
- **Tap:** homebrew/core
- **Full Name:** gokey
- **Version Scheme:** 0
- **Revision:** 0
- **Head Version:** HEAD
- **Bottle Stable Root URL:** <https://ghcr.io/v2/homebrew/core>
- **Deprecated:** no
- **Disabled:** no
- **Keg Only:** no
- **URL Keys:** head, stable

## 其他软件包管理器记录

- Debian apt - gokey - 0.1.2-1+b13: normalized package name match | Debian stable package indexes: gokey from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | simple vaultless password manager in Go | https://github.com/cloudflare/gokey
- Debian apt - golang-github-cloudflare-gokey-dev - 0.1.2-1: normalized package name match | Debian stable package indexes: golang-github-cloudflare-gokey-dev from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | simple vaultless password manager in Go - dev package | https://github.com/cloudflare/gokey
- Nix - gokey: normalized package name match | nixpkgs package indexes: pkgs/by-name/go/gokey/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
- Ubuntu apt - gokey - 0.1.2-1build1: normalized package name match | Ubuntu 24.04 LTS package indexes: gokey from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | simple vaultless password manager in Go | https://github.com/cloudflare/gokey
- Ubuntu apt - golang-github-cloudflare-gokey-dev - 0.1.2-1build1: normalized package name match | Ubuntu 24.04 LTS package indexes: golang-github-cloudflare-gokey-dev from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | simple vaultless password manager in Go - dev package | https://github.com/cloudflare/gokey
- MacPorts - gokey: normalized package name match | MacPorts ports tree: security/gokey/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1


## 相关链接

- [Cloud CLI packages](https://www.automicvault.com/zh-hans/pkg/cloud-clis/) - Belongs to a cloud or infrastructure command family.
- [Source-control packages](https://www.automicvault.com/zh-hans/pkg/source-control-tools/) - Belongs to a source-control command family.
- [Terminal utility packages](https://www.automicvault.com/zh-hans/pkg/terminal-utilities/) - Matched terminal and command-line workflow metadata.
- [Language runtime packages](https://www.automicvault.com/zh-hans/pkg/language-runtime-packages/) - Matched language runtime, compiler, or interpreter metadata.
- [go](https://www.automicvault.com/zh-hans/pkg/brew/go/) - Build dependency declared by Homebrew.
- [go-md2man](https://www.automicvault.com/zh-hans/pkg/brew/go-md2man/) - Build dependency declared by Homebrew.
- [clipsafe](https://www.automicvault.com/zh-hans/pkg/brew/clipsafe/) - Shares av.db curated category or tags: cli, password-management, password-manager, security.
- [enpass-cli](https://www.automicvault.com/zh-hans/pkg/brew/enpass-cli/) - Shares av.db curated category or tags: cli, go, password-management, password-manager, security.
- [go-passbolt-cli](https://www.automicvault.com/zh-hans/pkg/brew/go-passbolt-cli/) - Shares av.db curated category or tags: cli, password-management, password-manager, security.
- [prs](https://www.automicvault.com/zh-hans/pkg/brew/prs/) - Shares av.db curated category or tags: cli, password-management, password-manager, security.
- [pwsafe](https://www.automicvault.com/zh-hans/pkg/brew/pwsafe/) - Shares av.db curated category or tags: cli, password-management, password-manager, security.
- [rbw](https://www.automicvault.com/zh-hans/pkg/brew/rbw/) - Shares av.db curated category or tags: cli, password-management, password-manager, security.
- [gopass-jsonapi](https://www.automicvault.com/zh-hans/pkg/brew/gopass-jsonapi/) - Shares av.db curated category or tags: cli, password-management, password-manager, security.
- [gopeed](https://www.automicvault.com/zh-hans/pkg/brew/gopeed/) - Shares av.db curated category or tags: cli, password-management, password-manager, security.

## Combined YAML source

View the package source record on GitHub. [combined/gokey.yml](https://github.com/automic-vault/db/blob/main/combined/gokey.yml)


## 来源

- Nucleus package database
- Geiger risk classifier
- package-page enrichment
- curated package history
- package version freshness
- av.db category and tag curation
- package relationship graph
- external package-manager database matches
- cross-ecosystem install command graph