cloudflare/gokey

Health v2 · maintenance only

Adoption not part of the score

2431 stars · 110 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

gokey is a vaultless password manager written in Go that deterministically derives passwords and cryptographic keys on the fly from a master password and a realm string, eliminating the need to store or sync a password vault. It can also generate seed files and various key types including ECC (P-256/384/521, x25519, ed25519) and RSA private keys.

Use cases

• generate site passwords from a master password without storing a vault
• derive deterministic ssh or tls private keys from a master password
• avoid backing up and syncing a password vault file
• generate a symmetric key or seed file for encryption
• recreate passwords anywhere without third-party password manager services

When to choose

• you want a stateless, vault-free password manager you can run anywhere Go runs
• you need deterministic generation of passwords and asymmetric keys from a single master secret
• you prefer a minimal CLI over GUI password managers

When to avoid

• you want features like password sharing, breach monitoring, or browser autofill
• you need to store existing arbitrary passwords or notes securely
• you require a graphical or mobile password manager experience

Facets

cli-tool · maturity stable

cryptography security cli secrets-management security privacy developer-tools cli go cross-platform windows password-manager password-generator deterministic stateless vaultless key-generation ecc ed25519 rsa command-line linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="cloudflare/gokey")