FiloSottile/mkcert

Health v2 · maintenance only

Adoption not part of the score

59501 stars · 3132 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

mkcert is a zero-config Go CLI tool that creates a local certificate authority and generates locally-trusted TLS certificates for development hostnames like localhost or *.example.test. It automatically installs the local CA into system and Firefox/NSS trust stores on macOS, Linux, and Windows.

Use cases

• generate locally trusted https certificates for localhost development
• create self-signed certs without browser trust warnings
• set up a local root ca for development
• make wildcard certificates for local test domains like example.test
• serve https locally in chrome and firefox without errors
• generate tls certs for 127.0.0.1 and ::1 in dev

When to choose

• you need browsers to trust local development certificates with zero configuration
• you want to avoid browser warnings for localhost or custom test domains
• you develop on macOS, Linux, or Windows and need a simple cross-platform cert tool

When to avoid

• you need certificates trusted by other machines or the public internet
• you need a CA for production or automated server certificate management (use a real CA or ACME client like certbot)
• you cannot safely store the root CA private key on your machine

Facets

cli-tool · maturity stable

security cryptography developer-tools cli developer-tools security web-development windows cli cross-platform tls-certificates local-ca https localhost development-certificates root-ca nss zero-config command-line macos linux

Member repositories

For agents

markdown · JSON · MCP: product_card(name="FiloSottile/mkcert")