Alternatives
Products that do what gocryptfs, an aspiring successor to EncFS, now in v1.0 does
Author of gocryptfs and co-maintainer of EncFS here. gocryptfs is a FUSE overlay filesystem for Linux like EncFS. But it is written from scratch in Go, uses modern crypto and fixes the security issues of EncFS while providing equivalent speed. Some of the key differences to EncFS are: * Just one security level roughly equivalent to EncFS "paranoia" mode, at the speed of "default" mode. * A design so simple it fits on one page ( this one: https://nuetzlich.net/gocryptfs/security/ ) * Explicit filesystem creation using "gocryptfs -init". No configuration prompts. *…
- 1EA
Enc is a CLI tool for encryption, a modern and friendly alternative to GnuPG. It is easy to use, secure by default and can encrypt and decrypt files using password or encryption keys, manage and download keys, and sign data. Our goal was to make encryption available to all engineers without the need to learn a lot of new words, concepts, and commands. It is the most beginner-friendly CLI tool for encryption, and keeping it that way is our top priority.
2023 · github.com
- 2
- 3SA
Hey folks, We are the team behind Slik. Over the past year, we have been hacking on SlikSafe [1] a Dropbox alternative where all your data is first encrypted on your own device and then stored on decentralized storage. Some features we're most excited about are - - multi-device data sync, - auto-backups via desktop apps, - search your docs by name or contents with end-to-end encryption, - easy sharing via email, QR-code or private-link, - Password-less login using MetaMask/Phantom We leverage storage providers IPFS and Storj for global redundancy, reliability, and immutability. You can…
2021
- 4EA
Hi HN, I'm building ThirdCloud with the goal to replace Google Drive for everyone: more private, cheaper & maybe better UI/UX. So far, I've successfully implemented the main feature, which involves uploading and downloading files. Files are encrypted before being sent to IPFS network. Would like to hear your thoughts on this proof of concept.
2023 · thirdcloud.org
- 5RM
SQLite encryption at-rest is a hot requested feature of both the “default” CGo driver [1] and the transpiled alternative driver [2]. So, this is a feature I wanted to bring to my own Wasm based Go driver/bindings [3]. Open-source SQLite encryption extensions have had a troubled last few years. For whatever reason, in 2020 the (undocumented) feature that made it easy to offer page-level encryption was removed [4]. Some solutions are stuck with SQLite 3.31.1, but Ulrich Telle stepped up with a VFS approach [5]. Still, their solution seemed harder than something I'd want to maintain, as it…
2024 · github.com
- 6ZA
Jul 2026 · zerofs.net
- 7
- 8CS
We started CallFS after yet another late-night “why did the uploads vanish?” incident. Our small team had stitched together rsync, a fragile NFS mount, and an S3 bucket—none of it observable, all of it waiting to bite us. So we wrote a single-process file service in Go that: • Speaks the S3 API (so existing tooling works). • Stores hot data on local disks for speed; cold data can sit in any S3-compatible bucket. • Exposes Prometheus metrics and JSON logs by default, because “what happened?” shouldn’t be guesswork. • Ships as a ~25 MB static binary—no external deps, MIT license. Today it’s…
2025 · github.com
- 9GN
Hey HN! I just released go-nbd, a lightweight Go library for effortlessly creating NBD servers and clients. Its a neat tool for creating custom Linux block devices with arbitrary backends, such as a file, byte slice or what I'm planning to use it for, a tape drive. While there are a few partially abandoned projects like this out there already, this library tries to be as maintainable as possible by only implementing the most recent handshake revision and baseline functionality for both the client and the server, while still having enough support to be useful. I'd love to get your feedback :)
2023 · github.com
- 10SA
2015 · github.com
- 11SO
2016 · static.land
- 12OT
In the past few days, there have been uncertainties and concerns about the LUKS (“Linux Unified Key Setup”) disk encryption, which is widely used on Linux. We publish our assessment of this here.
2023 · dys2p.com
- 13SS
I had this backup code working reliably for years, using local file system, vps/dedicated server, or remote storage for backup, then I finally get time to wrap README, iron few missing switches and publish. Should be production ready and reliable, so it could be useful to others. Contributors are welcome.
2023 · github.com
- 14RO
Finally open sourced an internal tool we've been using for managing secrets. It's similar to SOPS, but more opinionated, easier to configure/use correctly, and produces nicer git diffs. It also supports one-way encryption, so you don't have to know the private key to add secrets.
2023 · github.com
- 15LA
2015 · github.com
- 16SM
This is a tool to manage encrypted local backups of secrets. The core idea is that it aims to be usable without depending on it, meaning that even if the software disappeared from the face of Earth tomorrow, your data would still be recoverable. It also integrates nicely with NixOS (which is what I use, though it does not require NixOS to be used). I have summed up a bit of explanation and some answers to reasonable questions in a blog post: https://baldino.dev/blog/secs-man/
Jun 2026 · github.com
- 17NA
Hi HN, I've been building Nucleus, a lightweight Linux container runtime focused on two workloads: ephemeral AI-agent sandboxes and declarative NixOS services. It's a single Rust binary, no daemon. It is not a Docker replacement and not a strict subset of Docker either. I dropped the entire image-and-distribution half (no Dockerfile, no layers, no registry, no pull/push, no persistent storage layer) in exchange for going deeper on isolation and reproducibility. The rootfs is either a directory copied into tmpfs (agent mode) or a Nix-built closure mounted read-only (production mode). If…
Jun 2026 · github.com
- 18
A fast, rootless sandbox and virtual resource runtime for any workload, including untrusted and AI-generated code. Daemonless: a real, kernel-enforced container in ~3.5 ms from an OCI image, out of one static binary - getkern/kern
13d ago · github.com
- 19GA
I built GRSH because I wanted a modern, memory-safe shell that feels native to FreeBSD but works seamlessly on macOS. While there are many shells out there, GRSH is my take on a minimal, fast, and secure command interpreter written entirely in Rust. It's designed for users who want the safety guarantees of Rust without the overhead of more bloated alternatives. I'm currently working on the official FreeBSD port. I’d love to get feedback on the shell's behavior and performance from the community. Github: https://github.com/antoniomalara301289/grsh
Jan 2026 · grimreaper.icu
- 20GE
2018 · github.com
- 21AA
2014 · github.com
- 22CM
Hello HN! We’re Dan and Vaughan, based in Cambridge, UK. We recently launched cunoFS, a filesystem for fast, POSIX object storage access. Yes, we’ve heard that “Object Storage is just not suitable for POSIX workloads” or that “workloads should be rewritten to natively support S3”. But what if it could be? And often much faster than S3-native apps? We’ve worked hard to make this possible, without the shortcomings of other approaches. Summary here: - Run (unmodified) applications with S3/AZ/GCP or “S3 compatible” storage, for example: ls s3:// az://…
2024 · cuno.io
- 23ET
2014 · disk42.com
- 24EA
2024 · codeberg.org
Ranked by how close each launch is in meaning, then by votes. Refine with a description →