Hacker GitHub

← All repos

FiloSottile/age

View on GitHub ↗ ★ 24,168 Go

A simple, modern and secure encryption tool (and Go library) with small explicit keys, no config options, and UNIX-style composability.

125 mentions on Hacker News by 106 people: 23 stories, 102 comments · first 2019-10-07 · latest 2026-10-10

Mentions per year 125 mentions · busiest year 2021 (29)
20082026
AllStoriesComments NewestTopOldest
  1. …I have. [0]: https://www.passwordstore.org/ [1]: https://github.com/FiloSottile/passage [2]: https://github.com/FiloSottile/age
    comment by movsx · 2026-10-10 · in Bitwarden Dual License Model
  2. That is true, but it's not specifically what makes it unique. Most encryption tool (like https://github.com/FiloSottile/age which is what secs-man uses under the hood) do not usually bake in the encryption key, rather they expect you to…
    comment by Fran314 · 2026-06-25 · in Show HN: Secs-man, a secrets manager you can (not) rely on
  3. Or will they ban you from using something like https://github.com/filosottile/age to encrypt and armor text encode things you send inside of the non-encrypted chat? echo "Am I doing something illegal, France?" | age -e -r…
    comment by kivle · 2026-05-10 · in France moves to break encrypted messaging
  4. …the command line is worse, so at least you're not doing that! 1: https://github.com/getsops/sops / https://github.com/FiloSottile/age 2: https://dotenvx.com
    comment by ctmnt · 2026-02-24 · in Show HN: enveil – hide your .env secrets from prAIng eyes
  5. …use age[1] to encrypt payloads targeting ssh public keys. And decrypt using ssh private keys. [1] < https://github.com/FiloSottile/age >
    comment by coppsilgold · 2026-01-04 · in Ed25519-CLI – command-line interface for the Ed25519 signature system (2024)
  6. age https://github.com/FiloSottile/age
    comment by lagniappe · 2025-12-28 · in Gpg.fail
  7. > I need an alternative to "gpg --encrypt --armor --recipient <foo>" That's literally age. https://github.com/FiloSottile/age
    comment by some_furry · 2025-12-27 · in Gpg.fail
  8. …could be using SSH keys for signatures and age[1] for encryption targeting SSH keys. [1] < https://github.com/FiloSottile/age >
    comment by coppsilgold · 2025-12-27 · in Gpg.fail
  9. …used only for authentication, and that SSH keys held on YubiKeys can't be used to decrypt files. https://github.com/FiloSottile/age?tab=readme-ov-file#encryp...
    comment by cl3misch · 2025-12-08 · in Show HN: Lockenv – Simple encrypted secrets storage for Git
  10. …across every repo. https://github.com/stefanoverna/kavo It’s built on top of age for encryption ( https://github.com/FiloSottile/age ).
    comment by steffoz · 2025-12-08 · in Show HN: Lockenv – Simple encrypted secrets storage for Git
  11. …in Go. No matter how well-implemented and reliable it is, I can't pass its secrets to https://github.com/FiloSottile/age . I assume all process memory may contain residual secrets. As a mitigation in a password manager and an encrypted…
    comment by networked · 2025-11-20 · in Go Cryptography State of the Union
  12. …at rest, restic[3]. PGP having all this built-in with forward-compatibility is a liability. [0] https://github.com/FiloSottile/age [1] https://github.com/jedisct1/minisign [2] https://man.openbsd.org/ssh-keygen.1 [3]…
    comment by kaoD · 2025-11-14 · in GPG and Me (2015)
  13. …are trying to ditch GnuPG and switch to simpler and better cryptography tools, like age. https://github.com/FiloSottile/age - Android with `pass` was a bad experience. The official package was unmaintained. The fork was not packaged in…
    comment by idoubtit · 2025-09-14 · in Pass: Unix Password Manager
  14. …better, PGP email it is. [1] https://blog.cryptographyengineering.com/2014/08/13/whats-ma... [2] https://github.com/FiloSottile/age/issues/93
    comment by mananaysiempre · 2025-06-10 · in Spoofing OpenPGP.js signature verification
  15. …is to make an easy-to-use tool that does a specific workflow vs trying to be a swiss army knife. https://github.com/FiloSottile/age is this for encrypting files. https://en.wikipedia.org/wiki/Signify_(OpenBSD) and…
    comment by akerl_ · 2025-04-18 · in Shell-secrets – GPG-encrypted environment variables
  16. …with gpg. There are way better and simpler options. Age has a simpler interface and SSH key support https://github.com/FiloSottile/age ejson2env has the environment variable integration and ejson has multiple backends…
    comment by viraptor · 2025-04-18 · in Shell-secrets – GPG-encrypted environment variables
  17. …actually be sops ( https://github.com/getsops/sops ), or age (made by the fantastic Filo Sottile: https://github.com/FiloSottile/age ), or, hell, just using libsodium sealed boxes. AMS KMS or Vault is perhaps even worse of an answer,…
    comment by hatf0 · 2025-02-01 · in Hell is overconfident developers writing encryption code
  18. It looks like age with SSH keys uses a birationally equivalent keypair. https://github.com/FiloSottile/age/blob/176e245b3cb3ada322c2... If you're using, for example, libsodium, you'd want the Ed25519 to X25519 functions to convert the two.…
    comment by some_furry · 2024-11-16 · in What to Use Instead of PGP
  19. …AnVVrs98xMBqtIOiS63HZ3BQIGU6jpBWbX3ELCALfL/Le6UL3DunYfWqNPvhAKhlY4gQEjMzrL6ytxTFCXLGJpBSZHkK3DIQ= [1] https://github.com/FiloSottile/age#user-content-ssh-keys [2] https://www.unixtutorial.org/how-to-generate-ed25519-ssh-key... [3]…
    comment by rawandriddled · 2024-11-15 · in What to Use Instead of PGP
  20. How would you compare this to existing tools in the space like https://github.com/FiloSottile/age ? Seems like age has multiple implementations (rust, go), has a permissive license, a public specification (…
    comment by SahAssar · 2024-10-27 · in Show HN: Ezcrypt – A file encryption tool (simple, strong, public domain)
  21. …in a new shell but `chezmoi git` usually is what I need. The age [0] integration is nice. [0] - https://github.com/FiloSottile/age
    comment by ashconnor · 2024-09-06 · in Better Dotfiles
  22. …is `pass-age` https://github.com/FiloSottile/passage ... unifies to `ssh` keys as the key material. https://github.com/FiloSottile/age ``` RECIPIENT can be an age public key generated by age-keygen ("age1...") or an SSH public key…
    comment by ramses0 · 2024-08-29 · in Ask HN: Developer PC setup automations for company owned devices
  23. I have been a fan of https://github.com/FiloSottile/age for a while now, but one thing that has always bothered me about encryption tools is how they don't offer a way to secure a whole directory which, IMO, is a much more common use-case.…
    comment by 0xndavd · 2024-08-29 · in New Directory Encryption Tool
  24. …and cmd/age will transparently ask for the passphrase before using them. Is that what you meant? https://github.com/FiloSottile/age?tab=readme-ov-file#passph...
    comment by FiloSottile · 2024-08-05 · in Age is a simple, modern and secure file encryption tool, format, and Go library
  25. …as different plaintexts, some academic researchers tried!). Our file key encryption is not ( https://github.com/FiloSottile/age/commit/2194f6962c8bb3bca8... ) which means that if you host an online service that accepts an age file and…
    comment by FiloSottile · 2024-08-05 · in Age is a simple, modern and secure file encryption tool, format, and Go library
  26. …if time ever permits. I guess I should call it “cage” as in “compliant actually good encryption” 1: https://github.com/FiloSottile/age
    comment by tatersolid · 2024-06-26 · in The XAES-256-GCM extended-nonce AEAD
  27. The same guy that brought us https://github.com/FiloSottile/age I really like this tool.
    comment by vbezhenar · 2024-02-01 · in Show HN: filippo.io/mlkem768 – Post-Quantum Cryptography for the Go Ecosystem
  28. I like that https://github.com/FiloSottile/age has small public keys.
    comment by eterps · 2023-12-16 · in What is the point of a public key fingerprint?
  29. > something fresh It exists, it's called age.. Some random links https://github.com/FiloSottile/age https://www.reddit.com/r/crypto/comments/hr64hr/state_of_age... https://github.com/FiloSottile/age/discussions/432 > (Acquiring keys,…
    comment by nextaccountic · 2023-12-07 · in A Schism in the OpenPGP World
  30. …to share. If others are interested to learn more, here are two other interesting posts about Age: https://github.com/FiloSottile/age/discussions/432 https://words.filippo.io/dispatches/age-authentication/
    comment by throwaway2037 · 2023-11-28 · in $20k bounty was claimed
  31. of all things I was able to resolve the issue via this github issue: https://github.com/FiloSottile/age/issues/370#issuecomment-1...
    comment by AndyKelley · 2023-11-01 · in Cosmopolitan Third Edition
  32. …of encryption something like age[0] makes it much easier to not shoot yourself in the foot. [0] https://github.com/FiloSottile/age
    comment by Dachande663 · 2023-10-19 · in Would you trust a repository made like this to save your secrets?
  33. …should be easy to sync, but its not implemented yet. Looking forward to input & comments :) [1] https://github.com/FiloSottile/age
    comment by balu_ · 2023-03-09 · in Show HN: A-Pass – small little password manager
  34. > Did you meant 256 bits instead? Or is this a deliberate choice? No; yes. https://github.com/FiloSottile/age/blob/891be91d42721088db0d...
    comment by loeg · 2023-02-26 · in Age: Modern file encryption format with multiple pluggable recipients
  35. …severity) in existing Age implementations. [1] https://github.com/DavidBuchanan314/bagel [2] https://github.com/FiloSottile/age/discussions/497
    comment by Retr0id · 2023-02-26 · in Age: Modern file encryption format with multiple pluggable recipients
  36. Why not just link to the actual code repository? https://github.com/FiloSottile/age
    comment by raziel2p · 2023-02-26 · in Age: Modern file encryption format with multiple pluggable recipients
  37. …Decrypt: `age -d secrets.txt.age > secrets.txt` It asks for a password in both operations. [0] https://github.com/FiloSottile/age
    comment by PhilippGille · 2023-02-11 · in Show HN: Enc – A modern and friendly CLI alternative to GnuPG
  38. How does this compare to age: https://github.com/FiloSottile/age ?
    comment by procrastitron · 2023-02-10 · in Show HN: Enc – A modern and friendly CLI alternative to GnuPG
  39. …age (another tool of Filippo's) leverages this to make encrypting to any GitHub user easy[1]. [1]: https://github.com/FiloSottile/age#encrypting-to-a-github-us...
    comment by woodruffw · 2023-01-08 · in ssh whoami.filippo.io
  40. > I don't think age does any real password extension. Did you even bother to check? https://github.com/FiloSottile/age/blob/main/scrypt.go This isn't exactly hidden.
    comment by some_furry · 2022-12-28 · in Pa – a simple password manager based on age
  41. age in question, in case you were as confused as I was by what that means: https://github.com/FiloSottile/age
    comment by input_sh · 2022-12-28 · in Pa – a simple password manager based on age
  42. …a USB stick then encrypting it with a sensible and usable tool (with modern AEAD encryption) like https://github.com/FiloSottile/age will be far more reliable. 3 You have no basis for this speculation. Signal are clear that they don't hold…
    comment by angry_octet · 2022-11-01 · in The PGP Problem
  43. …backend[3], and I use `rage-mount` to mount (read-only) views of encrypted archives. [1]: https://github.com/FiloSottile/age [2]: https://github.com/str4d/rage [3]: https://github.com/woodruffw/kbs2
    comment by woodruffw · 2022-10-24 · in Ask HN: What do you use for encrypting your personal stuff?
  44. For small one-off encryption use cases (i.e. encrypt a single file) I use age: https://github.com/filosottile/age Especially convenient when you need to transmit the file over some untrusted medium like email, or if you just want to dump…
    comment by TheFlyingFish · 2022-10-24 · in Ask HN: What do you use for encrypting your personal stuff?
  45. …me if I’m wrong. ————- Update: Here are the links for the security level of 128 bits in Age: https://github.com/FiloSottile/age/discussions/423 https://github.com/C2SP/C2SP/blob/main/age.md
    comment by aborsy · 2022-09-26 · in Age – a simple, modern and secure file encryption tool, format, and Go library
  46. …really designed for communication and doesn't want to become a "a worse version of signal". [0] https://github.com/FiloSottile/age/issues/51
    comment by sixhobbits · 2022-09-26 · in Age – a simple, modern and secure file encryption tool, format, and Go library
  47. Yes, this is incredibly easy to use: https://github.com/FiloSottile/age
    comment by nixgeek · 2022-09-14 · in Signing Git commits with your SSH key (2021)
  48. Yeah, it's unauthenticated in asymmetric mode https://github.com/FiloSottile/age/issues/59
    comment by dinosaurdynasty · 2022-07-14 · in Cryptomator – Encrypt files on your cloud storage
  49. Single binary alternative, open source: https://github.com/FiloSottile/age From former head of Go security team at Google.
    comment by geenat · 2022-07-14 · in Cryptomator – Encrypt files on your cloud storage
  50. …be able to trust the contents of it fully, otherwise it's really not that useful for me personally! https://github.com/FiloSottile/age/issues/59 https://neilmadden.blog/2019/12/30/a-few-comments-on-age/
    comment by chlorion · 2022-06-11 · in age v1.1.0-rc.1: plugin and YubiKeys support