gokey

Name: gokey
Brand: gokey

Simple vaultless password manager in Go

softwarePassword Managers Password ManagerVaultlessGo

Visit Website

Our Verdict

Best for

DevOps teams and developers seeking simple security solutions

Skip if

Non-technical users seeking user-friendly interfaces

What is gokey?

gokey is a vaultless password manager written in Go. Rather than storing passwords anywhere, it derives each password on the fly from your master password and a realm string, so there is no vault or database to sync, back up, or lose. An optional encrypted seed file supplies real randomness for cases where pure derivation is not enough.

SpecificationsAI-estimated

open source✅ Yes

github stars2,428

api available✅ Yes

support optionsGitHub Issues

primary languageGo

Key Features of gokey

Derives each password on the fly from a master password plus a realm string, so nothing is ever stored

Removes the need to manage, back up, or sync a password vault

Optional encrypted seed file mode supplies higher entropy than the master password alone

Generates cryptographic private keys as well as passwords (ECC and RSA supported)

Command line interface that writes to stdout for easy scripting and integration

Configurable output type and password length via the -t and -l options

Seed files are encrypted with your master password, so they are safe to back up off-site

Use Cases for gokey

Passwords Without a Vault

Regenerate each site password on demand from your master password and a realm string, so there is no password database to sync, back up or lose.

Reproducible Passwords Across Machines

Derive the identical password on any machine from the same master password and realm, with no synchronisation step between devices.

Automated Password Generation

Use gokey to generate strong and unique passwords for automated systems and services.

Seed File for Key Material

Generate an encrypted seed file when you need real randomness rather than pure derivation - it is safe to back up to third-party storage.

Pros & Cons of gokey

Pros

Simple and easy to use
Vaultless by design - derives passwords on the fly, with nothing to store, back up, or sync
Cross-platform compatibility
Free and open-source

Cons

Command-line only — there is no graphical interface
May require technical expertise for advanced features
Vaultless by design: passwords are derived on the fly, so pre-existing or externally generated passwords cannot be imported or stored

Frequently Asked Questions

Is gokey secure?

gokey never stores your passwords - each one is derived on demand from your master password and a realm string, so there is no vault or database to breach. An optional encrypted seed file can supply higher-entropy key material.

Is gokey free?

Yes, gokey is free and open-source.

Can I use gokey with my team?

No. gokey is a single-user command-line tool with no account, server, or sharing features - each person derives their own passwords from their own master password.

Is gokey compatible with my device?

gokey is a command-line tool written in Go, so it runs on Windows, macOS, and Linux. There is no iOS or Android app.

Pricing Overview

View full pricing →

Free

Detailed plans are not listed. Visit the official website for pricing information.

Reviews & Ratings0.0

Write a Review See all reviews →

No reviews yet. Be the first to write one!

Top Alternatives & Similar Tools

View all alternatives & similar tools →

lesspass

AI-suggested

Lesspass is a password manager that generates unique, complex passwords for each of your accounts based on a master password and information about the account. It's a stateless password manager, meaning it doesn't store any of your passwords, and instead generates them on the fly when you need them.

Compare with gokey

gopass