# Install john-jumbo with Homebrew, apk, apt, dnf, MacPorts, Nix, pacman, zypper Enhanced version of john, a UNIX password cracker. Version 1.9.0 via Homebrew; verified 2026-08-02. Also installable with macports: sudo port install john. ## Install ```sh sudo av install brew:john-jumbo ``` Additional install commands: ### macOS - Homebrew (100%): ```sh brew install john-jumbo ``` Evidence: local Homebrew formula metadata - MacPorts (94%): ```sh sudo port install john ``` Evidence: MacPorts ports tree: sysutils/john/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 ### Linux - apk (92%): ```sh sudo apk add john ``` Evidence: Alpine Linux edge package indexes: john from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz - Debian apt (92%): ```sh sudo apt install john ``` Evidence: Debian stable package indexes: john from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz - dnf (92%): ```sh sudo dnf install john ``` Evidence: Fedora Rawhide package metadata: john from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/210a2053c8e007daf9ae39c2a21daaed9b2ddd07d63ecffa597050361e73650c-primary.xml.zst - Nix (92%): ```sh nix profile install nixpkgs#john ``` Evidence: nixpkgs package indexes: pkgs/by-name/jo/john/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - pacman (92%): ```sh sudo pacman -S john ``` Evidence: Arch Linux sync databases: john from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz - zypper (92%): ```sh sudo zypper install john ``` Evidence: openSUSE Tumbleweed package metadata: john from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst ## Package facts - **Package key:** brew:john-jumbo - **Package manager:** Homebrew - **Package manager page:** - **Version:** 1.9.0 - **Source summary:** Enhanced version of john, a UNIX password cracker - **Homepage:** - **Upstream docs:** - **License:** GPL-2.0-or-later - **Source archive:** - **Last updated:** 2026-08-02T01:26:52+09:00 - **Generated:** 2026-08-04T22:13:35+00:00 ## Executables - john (cli) - john (alias) ## Dependencies - gmp - openssl@3 ## Build dependencies - pkgconf ## Uses from macOS - libxcrypt ## Install behavior - Post-install hook: not defined - Bottle: available on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux ## Freshness - Page generated: 2026-08-04 - Package-manager version: 1.9.0 - Package-manager updated: 2026-08-02 - Local data: ok - Upstream repository: https://www.openwall.com/john/ - info: Release/tag comparison is only available for GitHub repositories. ## Project history and usage John the Ripper Jumbo is the community-enhanced branch of John the Ripper, an offline password auditing and recovery tool. The Jumbo line adds large amounts of community code, documentation, formats, and helper data beyond the core cracker, including support for hundreds of hash and cipher types. ### Project history John the Ripper began in 1996 as Solar Designer's replacement for Cracker Jack, with prototypes for incremental mode dating to 1995. It became open source in 1997, and the 1.5 rewrite in 1998 became the basis for later versions. The public GitHub repository was created in 2011 and uses bleeding-jumbo as its default branch. The Jumbo branch formalized the place where experimental and community-contributed cracking formats, scripts, and documentation could land faster than in the core release. Openwall's own README warns that Jumbo contains much more functionality and lower maturity guarantees than core, which is exactly why it became the branch most security practitioners reach for when they need broad format coverage. ### Adoption history Openwall distributes Jumbo source and Windows binaries and recommends the GitHub development source in preference to the old Jumbo release tarball. Homebrew packages it separately as john-jumbo, where it conflicts with the core john formula and pulls in extra dependencies such as GMP and OpenSSL. The upstream homepage and Homebrew formula show the package-manager split clearly: core john remains available, while john-jumbo is the enhanced formula for users who want broader cracking coverage. ### How it is used Jumbo is used for password-auditing jobs where the input format may be archive files, office documents, SSH keys, cryptocurrency wallets, network captures, operating-system password stores, databases, or web application hashes. Users typically run converter tools where needed, crack with john, and inspect results with john --show or the john.pot store. ### Why package nerds care The john-jumbo formula is package-nerd-interesting because it captures a real upstream social split: a conservative core and a fast-moving, format-rich Jumbo branch. It also exposes the maintenance cost of security packages that bundle optimized CPU/GPU code, optional cryptographic libraries, helper scripts, and many architecture-specific assumptions. ### Timeline - 1995: Prototypes for John's incremental mode were written. - 1996: John the Ripper 1.0 was released as a Cracker Jack replacement. - 1997: John the Ripper became open source. - 1998: Version 1.5 rewrote the codebase that later versions built upon. - 2011: The openwall/john GitHub repository was created. - 2019: Openwall released the 1.9.0 Jumbo line and documented it separately from core. ### Related projects - Related projects include John the Ripper core, John the Ripper Pro, Hash Suite, Hash Suite Droid, Openwall wordlists, yescrypt, crypt_blowfish, passwdqc, john-packages, and the Johnny GUI. ### Sources - - - - - - ## Security Notes No matching local secret-handling manifest was found for john-jumbo. Package metadata is still published here so future coverage has a stable package URL. ## Source Database Details - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** john-jumbo - **Version Scheme:** 0 - **Revision:** 1 - **Conflicts With:** john - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** no - **URL Keys:** stable ## Other Package-Manager Records - MacPorts - john: installed executable or alias match | MacPorts ports tree: sysutils/john/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 - Debian apt - john - 1.9.0-2: installed executable or alias match | Debian stable package indexes: john from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | active password cracking tool | http://www.openwall.com/john/ - Debian apt - john-data - 1.9.0-2: installed executable or alias match | Debian stable package indexes: john-data from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | active password cracking tool - character sets | http://www.openwall.com/john/ - Nix - john: installed executable or alias match | nixpkgs package indexes: pkgs/by-name/jo/john/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - Ubuntu apt - john - 1.9.0-2build1: installed executable or alias match | Ubuntu 24.04 LTS package indexes: john from https://archive.ubuntu.com/ubuntu/dists/noble/main/binary-amd64/Packages.gz | active password cracking tool | http://www.openwall.com/john/ - Ubuntu apt - john-data - 1.9.0-2build1: installed executable or alias match | Ubuntu 24.04 LTS package indexes: john-data from https://archive.ubuntu.com/ubuntu/dists/noble/main/binary-amd64/Packages.gz | active password cracking tool - character sets | http://www.openwall.com/john/ - apk - john - 1.9.0-r8: installed executable or alias match | Alpine Linux edge package indexes: john from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | John the Ripper password cracker | https://www.openwall.com/john - apk - john-bash-completion - 1.9.0-r8: installed executable or alias match | Alpine Linux edge package indexes: john-bash-completion from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | Bash completions for john | https://www.openwall.com/john - apk - john-doc - 1.9.0-r8: installed executable or alias match | Alpine Linux edge package indexes: john-doc from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | John the Ripper password cracker (documentation) | https://www.openwall.com/john - apk - john-zsh-completion - 1.9.0-r8: installed executable or alias match | Alpine Linux edge package indexes: john-zsh-completion from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | Zsh completions for john | https://www.openwall.com/john - dnf - john - 1.9.0-12.fc43: installed executable or alias match | Fedora Rawhide package metadata: john from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/210a2053c8e007daf9ae39c2a21daaed9b2ddd07d63ecffa597050361e73650c-primary.xml.zst | John the Ripper password cracker | https://www.openwall.com/john - pacman - john - 1.9.0.jumbo1-13: installed executable or alias match | Arch Linux sync databases: john from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz | John the Ripper password cracker | https://www.openwall.com/john - zypper - john - 1.9.0-9.14: installed executable or alias match | openSUSE Tumbleweed package metadata: john from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | Utility to detect weak passwords | https://www.openwall.com/john/ ## Related links - [Terminal utility packages](https://pkg.so/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [Networking and protocol packages](https://pkg.so/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata. - [Security and crypto packages](https://pkg.so/security-crypto-tools/) - Matched security, identity, cryptography, password, signing, or certificate metadata. - [Homebrew utility packages](https://pkg.so/brew-utility-packages/) - Matched Homebrew package provider. - [openssl@3](https://pkg.so/brew/openssl-3/) - Runtime dependency declared by Homebrew. - [pkgconf](https://pkg.so/brew/pkgconf/) - Build dependency declared by Homebrew. - [john](https://pkg.so/brew/john/) - Shares the same upstream homepage. - [pwgen](https://pkg.so/brew/pwgen/) - Shares pkgdb curated category or tags: cli, security, unix. - [chkrootkit](https://pkg.so/brew/chkrootkit/) - Shares pkgdb curated category or tags: cli, security, unix. - [duo_unix](https://pkg.so/brew/duo-unix/) - Shares pkgdb curated category or tags: cli, security, unix. - [jailkit](https://pkg.so/brew/jailkit/) - Shares pkgdb curated category or tags: cli, security, unix. - [gnutls](https://pkg.so/brew/gnutls/) - Shares pkgdb curated category or tags: cli, security. - [krb5](https://pkg.so/brew/krb5/) - Shares pkgdb curated category or tags: cli, security. - [nettle](https://pkg.so/brew/nettle/) - Shares pkgdb curated category or tags: cli, security. - [passwdqc](https://pkg.so/brew/passwdqc/) - Security-sensitive metadata or terminology overlaps. Shared terms: cli, password, security. ## Combined YAML source View the package source record on GitHub. [combined/john-jumbo.yml](https://github.com/mxcl/pkgdb/blob/main/combined/john-jumbo.yml) ## Sources - pkg.so package database - package-page enrichment - curated package history - package version freshness - pkgdb category and tag curation - package relationship graph - external package-manager database matches - cross-ecosystem install command graph