Installation

fnox is a single binary for macOS, Linux, and Windows. Install it with any of the methods below, then continue with the quick start.

mise (recommended)

mise use -g fnox

To pin a version for a project instead, run mise use fnox in the project and commit mise.toml. Teammates and CI then get the same version. Upgrade with mise upgrade fnox.

Cargo

cargo install fnox --locked

This builds from source. The minimum Rust version is the rust-version in Cargo.toml. Run the same command again to upgrade.

Nix

The repository is a Nix flake:

nix profile install github:jdx/fnox

Prebuilt binaries

Download the archive for your platform from GitHub Releases and put fnox somewhere on your PATH. Builds are published for macOS (Apple silicon and Intel), Linux (x86_64 and arm64, glibc and musl), and Windows (x86_64 and arm64).

Verify

fnox --version

If your shell can't find fnox, check that the install directory (~/.cargo/bin for Cargo) is on your PATH, or that mise is activated, then open a new terminal.

Provider tools

fnox itself has no runtime dependencies, but some providers call a vendor CLI: 1Password needs op, Bitwarden needs bw, and so on. Each provider page lists what it needs. The quick start uses age-keygen from age to create a key:

mise use -g age

Shell completions

fnox completion zsh > "${fpath[1]}/_fnox"
fnox completion bash > ~/.local/share/bash-completion/completions/fnox
fnox completion fish > ~/.config/fish/completions/fnox.fish

See also

• Quick start: encrypt your first secret.
• Use an existing vault: connect 1Password or another vault.
• Contributing: build fnox from a checkout.