macOS
Homebrewverified · 100%
brew install enchivelocal Homebrew formula metadata
brew / rank 18346
Install enchive with Homebrew, Nix, zypper
Encrypted personal archives. Version 3.5 via Homebrew; verified from local package data. Also installable with nix: nix profile install nixpkgs#enchive.
install
Additional install commands
Linux
Nixverified · 92%
nix profile install nixpkgs#enchivenixpkgs package indexes · pkgs/by-name/en/enchive/package.nix · source: api.github.com
openSUSE zypperverified · 92%
sudo zypper install enchiveopenSUSE Tumbleweed package metadata · enchive · source: download.opensuse.org
overview
Package summary
Encrypted personal archives
Project links
Commands and aliases
- enchive
history
Project history and usage
Enchive is a small personal-file encryption tool for archiving files to yourself. Its README positions it as a focused alternative to larger systems such as GnuPG or encrypted filesystems, with no external dependencies and portability prioritized over performance.
Project history
The public repository dates to 2017, and the project's own documentation frames it as intentionally self-contained rather than ecosystem-seeking. It uses public-key style archival: a public key can encrypt files on machines that should not hold the secret key, while the secret key is needed for extraction.
Adoption history
Enchive's README explicitly says it does not need critical mass because it does not need to interoperate with other systems or people. Its adoption story is therefore narrow by design: it appeals to users who want a copyable, auditable CLI for personal encrypted archives rather than a shared standard.
How it is used
The documented workflow has three core commands: `keygen`, `archive`, and `extract`. By default, `keygen` writes `enchive.pub` and `enchive.sec` under `$XDG_CONFIG_HOME/enchive` or `~/.config/enchive`; archiving produces a `.enchive` file while leaving the original in place unless deletion is requested.
The tool also supports deriving an asymmetric key pair from a passphrase, using an scrypt-like memory-hard derivation scheme, and can run a short-lived key agent on Unix-like systems to avoid repeated passphrase prompts.
Why package nerds care
Enchive is package-nerd interesting because it is deliberately small: one CLI, no external dependencies, a documented file format, and a build that can produce a standalone C program. It represents the opposite end of the packaging spectrum from large crypto suites.
The tradeoff is visible in the README: Enchive is not trying to be a universal format or social web of keys. It is for users who want a simple local archival workflow and are comfortable choosing a niche tool for that job.
Timeline
- 2017: Public GitHub repository created.
- 2018: Published manual page generated for Enchive.
- 2025: Repository remained updated, according to available GitHub metadata.
Related projects
- GnuPG and encrypted filesystems are named by the README as more complex alternatives.
- Curve25519, ChaCha-family encryption, HMAC-SHA256, and an scrypt-like key derivation algorithm are documented implementation pieces.
Sources
security posture
Risk level: blue
broad file, network, media, or database tool signal.
Risk classifier
blue risk · medium confidence · tool
Why
- broad file, network, media, or database tool signal
Signals
- text:archive,encrypt
Install behavior
- No Homebrew bottle metadata was recorded.
Recommended review
Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.
local files
Configuration and credential file locations
These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.
Configuration files
Config paths the tool may read or write during local use.
- Unix
$XDG_CONFIG_HOME/enchive/enchive.pub~/.config/enchive/enchive.pub
Credential files
Credential-bearing paths to review before unattended agent runs.
- Unix
$XDG_CONFIG_HOME/enchive/enchive.sec~/.config/enchive/enchive.sec
executables
Installed executables
| Command | Kind | Exposure | Note |
|---|---|---|---|
enchive | executable | indexed executable | Discovered from the local executable index. |
freshness
Version and freshness
These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.
page generated2026-08-03
manager version3.5
manager updated
local dataunknown
upstreamnot available
latest detectednot detected
- okNo freshness warnings were generated.
install metadata
Package metadata
| Package key | brew:enchive |
|---|---|
| Version | 3.5 |
| Package manager | Homebrew |
| Homepage | https://github.com/skeeto/enchive |
| Repository | https://github.com/skeeto/enchive |
| Bottle | not recorded |
| Service | none declared |
source database matches
Other package-manager records
Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.
Nix95%
enchive
nix profile install nixpkgs#enchive- normalized package name match
- Matched by: Enchive
zypper95%
enchive 3.5-2.8
Long-term archive encryption tool
https://github.com/skeeto/enchive
sudo zypper install enchive- License: Unlicense
- Category: Productivity/Networking/Security
- Architecture: x86_64
- Source Package: enchive
- 1 dependencies
- 1 provides
- normalized package name match
- Matched by: Enchive
source trail
Generated from repository data
This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.
Combined YAML source
View the package source record on GitHub.
Used sources
- Geiger risk classifier
- cross-ecosystem install command graph
- curated configuration and credential file locations
- curated package history
- external package-manager database matches
- pkg.so package database
- pkgdb category and tag curation