# Install gocryptfs with Homebrew, apk, apt, dnf, MacPorts, Nix, pacman, zypper

Encrypted overlay filesystem written in Go. Version 2.6.1 via Homebrew; verified from local package data. Also installable with debian: sudo apt install gocryptfs.

## Install

```sh
sudo av install brew:gocryptfs
```

Additional install commands:

### macOS

- Homebrew (100%):

```sh
brew install gocryptfs
```

  Evidence: local Homebrew formula metadata

- MacPorts (94%):

```sh
sudo port install gocryptfs
```

  Evidence: MacPorts ports tree: fuse/gocryptfs/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1

### Linux

- apk (92%):

```sh
sudo apk add gocryptfs
```

  Evidence: Alpine Linux edge package indexes: gocryptfs from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz

- Debian apt (92%):

```sh
sudo apt install gocryptfs
```

  Evidence: Debian stable package indexes: gocryptfs from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz

- dnf (92%):

```sh
sudo dnf install gocryptfs
```

  Evidence: Fedora Rawhide package metadata: gocryptfs from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst

- Nix (92%):

```sh
nix profile install nixpkgs#gocryptfs
```

  Evidence: nixpkgs package indexes: pkgs/by-name/go/gocryptfs/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

- pacman (92%):

```sh
sudo pacman -S gocryptfs
```

  Evidence: Arch Linux sync databases: gocryptfs from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz

- zypper (92%):

```sh
sudo zypper install gocryptfs
```

  Evidence: openSUSE Tumbleweed package metadata: gocryptfs from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst

## Package facts

- **Package key:** brew:gocryptfs
- **Package manager:** Homebrew
- **Version:** 2.6.1
- **Source summary:** Encrypted overlay filesystem written in Go
- **Homepage:** <https://nuetzlich.net/gocryptfs/>
- **Repository:** <https://github.com/rfjakob/gocryptfs>
- **Generated:** 2026-08-03T19:37:03+00:00

## Executables

- gocryptfs (alias)
- gocryptfs-xray (alias)

## Install behavior

- Bottle: not available

## Freshness

- Page generated: 2026-08-03
- Package-manager version: 2.6.1
## Project history and usage

gocryptfs is an encrypted FUSE overlay filesystem written in Go. It was designed as an EncFS-inspired tool that fixes security weaknesses while preserving the convenient model of mounting an encrypted directory as a plaintext view.

### Project history

The public GitHub repository was created in September 2015. The README says gocryptfs is built on go-fuse, was inspired by EncFS, and strives to fix EncFS security issues while providing good performance.

The project reached version 1.0 on July 17, 2016 after stress and correctness testing with fsstress, extractloop, and xfstests. The README also records a March 3, 2017 security audit, signed releases from v0.4 onward, Linux as the native platform, beta-quality macOS support, and a stable CLI ABI for scripts and applications.

### Adoption history

gocryptfs spread through the channels expected for a filesystem utility: upstream release binaries, Linux distribution packages, MacPorts, Homebrew, and package-manager metadata for Alpine, Debian, Fedora, Nix, Arch, Ubuntu, and openSUSE in the batch input.

Its adoption was helped by a clear operational niche: users wanted per-directory encryption that worked with sync tools and ordinary filesystems without placing trust in a full-disk-encryption layer or a cloud provider.

### How it is used

The core workflow is to run `gocryptfs -init CIPHERDIR` and then mount `CIPHERDIR` at a plaintext mount point. The manpage also documents password changes, filesystem checks, info display, reverse mode, deterministic names, speed tests, and other operational flags.

gocryptfs stores encrypted data in CIPHERDIR and presents a plaintext view at MOUNTPOINT. Its `gocryptfs.conf` file is part of the encrypted directory metadata, while the password or master key remains the user's responsibility.

### Why package nerds care

Package nerds care about gocryptfs because filesystem tools are hard to package well: they touch FUSE, kernel interfaces, release signatures, platform caveats, and data safety. gocryptfs documents those edges unusually directly, including signed releases, security design, stable CLI ABI, benchmark expectations, and config-file recovery advice.

It is also a strong example of Go in systems-tool packaging: a single CLI with static-binary potential, distribution packages, and tight interaction with low-level OS facilities.

### Timeline

- 2015-09: GitHub repository created.
- 2016-07: Version 1.0 reached and declared ready for general consumption.
- 2017-03: Security audit completed.
- 2021-06: v2.0 released in the release history.
- 2025-08: v2.6.1 released.

### Related projects

- EncFS is the design predecessor named by gocryptfs.
- go-fuse is the FUSE library gocryptfs builds on.
- cppcryptfs is the independent Windows reimplementation named in the README.
- SiriKali is a graphical frontend that supports gocryptfs.

### Sources

- <https://api.github.com/repos/rfjakob/gocryptfs>
- <https://api.github.com/repos/rfjakob/gocryptfs/releases>
- <https://github.com/rfjakob/gocryptfs>
- <https://github.com/rfjakob/gocryptfs/blob/master/Documentation/MANPAGE.md>
- <https://github.com/rfjakob/gocryptfs/releases>
- <https://nuetzlich.net/gocryptfs>


## Security Notes

broad file, network, media, or database tool signal.

- **Geiger risk:** blue / medium
- broad file, network, media, or database tool signal


## Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.


## Configuration files

- Unix: CIPHERDIR/gocryptfs.conf
## Other Package-Manager Records

- Debian apt - gocryptfs - 2.5.1-2+b1: normalized package name match | Debian stable package indexes: gocryptfs from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | Encrypted overlay filesystem written in Go | https://github.com/rfjakob/gocryptfs
- Nix - gocryptfs: normalized package name match | nixpkgs package indexes: pkgs/by-name/go/gocryptfs/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
- Ubuntu apt - gocryptfs - 2.4.0-1build3: normalized package name match | Ubuntu 24.04 LTS package indexes: gocryptfs from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | Encrypted overlay filesystem written in Go | https://github.com/rfjakob/gocryptfs
- apk - gocryptfs - 2.6.1-r7: normalized package name match | Alpine Linux edge package indexes: gocryptfs from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | Encrypted overlay filesystem written in Go | https://github.com/rfjakob/gocryptfs
- apk - gocryptfs-doc - 2.6.1-r7: normalized package name match | Alpine Linux edge package indexes: gocryptfs-doc from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | Encrypted overlay filesystem written in Go (documentation) | https://github.com/rfjakob/gocryptfs
- dnf - gocryptfs - 2.6.1-7.fc45: normalized package name match | Fedora Rawhide package metadata: gocryptfs from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst | Encrypted overlay filesystem written in Go | https://github.com/rfjakob/gocryptfs
- pacman - gocryptfs - 2.6.1-1: normalized package name match | Arch Linux sync databases: gocryptfs from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz | Encrypted overlay filesystem written in Go. | https://github.com/rfjakob/gocryptfs
- zypper - gocryptfs - 2.6.1-1.8: normalized package name match | openSUSE Tumbleweed package metadata: gocryptfs from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | Encrypted overlay filesystem written in Go | https://nuetzlich.net/gocryptfs/
- zypper - gocryptfs-doc - 2.6.1-1.8: normalized package name match | openSUSE Tumbleweed package metadata: gocryptfs-doc from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | Documentation for gocryptfs | https://nuetzlich.net/gocryptfs/
- MacPorts - gocryptfs: normalized package name match | MacPorts ports tree: fuse/gocryptfs/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1


## Combined YAML source

View the package source record on GitHub. [combined/gocryptfs.yml](https://github.com/mxcl/pkgdb/blob/main/combined/gocryptfs.yml)


## Sources

- pkg.so package database
- Geiger risk classifier
- curated configuration and credential file locations
- curated package history
- pkgdb category and tag curation
- external package-manager database matches
- cross-ecosystem install command graph