gokey
About gokey
gokey is a vaultless password manager written in Go. It generates passwords and cryptographic keys on the fly using a master password and a realm string, eliminating the need for storing passwords in a vault. This approach allows users to recreate passwords without managing or syncing a password database.
The tool supports multiple modes of operation, including simple mode where passwords are derived directly from the master password and realm string, and a seed file mode for higher entropy requirements. In seed file mode, a master password encrypts a seed file, which is then used to generate passwords and keys.
gokey can generate various types of cryptographic keys, including ECC and RSA private keys, as well as raw random bytes for symmetric keys. It is designed for users who prefer a stateless approach to password management and need to generate secure credentials without relying on external storage.
Key features
- Generates passwords on the fly using a master password and realm string
- Supports generation of ECC and RSA private keys
- Can generate raw random bytes for symmetric keys
- Uses seed files for higher entropy in key generation
- Allows encryption of seed files with a master password
- Provides command-line interface for easy usage
Download v0.2.1
Mar 31, 2026Frequently asked questions
- Is gokey free?
- Yes. gokey is free and open-source software, distributed under the BSD-3-Clause license.
- Which platforms does gokey support?
- gokey provides downloads for Windows.
- What is the latest version of gokey?
- The latest version is v0.2.1, released on Mar 31, 2026.
- How do I install gokey?
- gokey can be installed using the Go toolchain with the command 'go install github.com/cloudflare/gokey/cmd/gokey@latest'. Precompiled binaries are also available in the Releases section of the repository.
- What platforms does gokey support?
- gokey is written in Go and can be compiled for any platform supported by the Go toolchain. Precompiled binaries are available for common platforms in the Releases section.
- Is gokey secure for generating cryptographic keys?
- gokey can securely generate cryptographic keys when used with a seed file, which provides higher entropy. Using only a master password for key generation is considered unsafe and requires explicit user override.
More Security & Privacy
rclone
rclone
Rclone is a command-line tool for syncing files across cloud storage services including Google Drive, Dropbox, and S3. It supports multiple providers and offers rsync-like functionality for cloud backups and transfers.
keepassxc
keepassxreboot
KeePassXC is a cross-platform password manager based on KeePass Password Safe. It is community-driven and supports secure storage and management of passwords across multiple operating systems.
keeweb
keeweb
Keeweb is a free, cross-platform password manager that works with KeePass databases. It offers a clean interface for securely storing and managing passwords across devices.