age-plugin-yubikey
« Back to VersTracker
Description:
Plugin for encrypting files with age and PIV tokens such as YubiKeys
Type: Formula  |  Latest Version: 0.5.0@0  |  Tracked Since: Dec 17, 2025
Links: Homepage  |  formulae.brew.sh
Category: Security
Tags: encryption yubikey security age piv hardware-token
Install: brew install age-plugin-yubikey
About:
age-plugin-yubikey is a plugin for the age encryption tool that enables the use of YubiKeys and other PIV tokens as hardware-backed identity devices for encrypting and decrypting files. It leverages the PIV applet on YubiKeys to manage age identities securely, ensuring that private keys never leave the hardware token. This provides a robust, phishing-resistant method for managing encryption keys without relying on software-based key storage.
Key Features:
  • Hardware-backed encryption using YubiKey PIV applet
  • Seamless integration with the age encryption ecosystem
  • Supports multiple PIV-compatible hardware tokens
  • Private keys are non-exportable, enhancing security
Use Cases:
  • Securing sensitive documents and backups with a physical security key
  • Automated server-side decryption processes requiring hardware authentication
  • Managing personal encryption keys without storing them on disk
Alternatives:
  • age – age itself supports software-based keys; this plugin adds hardware token support
  • gpg – GPG is more complex and feature-rich, but age with YubiKey offers a simpler, more modern workflow
License: Apache-2.0 OR MIT
Bottles available for: arm64_tahoe, arm64_sequoia, arm64_sonoma, arm64_ventura, arm64_monterey, sonoma, ventura, monterey, arm64_linux, x86_64_linux
Version History
Detected Version Rev Change Commit
Sep 13, 2025 9:13am 0 VERSION_BUMP 50979818
Nov 14, 2024 5:20pm 0 VERSION_BUMP 6cf4190c