What is Gecko?
Gecko is a command-line utility for creating encrypted vaults on USB drives (or any storage). It uses AES-256-GCM authenticated encryption with PBKDF2-HMAC-SHA256 key derivation (600,000 iterations) to keep your files secure.
Written in pure C with zero external dependencies. No OpenSSL. No libsodium. Just clean, auditable code.
$ gecko create D:\vault.gko
$ gecko add D:\vault.gko secret.pdf
$ gecko ls D:\vault.gko
$ gecko get D:\vault.gko secret.pdf
Features (v1.2.0)
AES-256-GCM
Military-grade authenticated encryption. Tamper-evident by design.
Time-Based Access
Set automatic expiration times for files. Optional auto-delete on expiry.
File Versioning
Maintain version history. Restore previous versions of files.
Secure Notes
Store encrypted text notes directly in your vault.
Secure Shredding
Multi-pass file destruction with random and pattern overwrites.
Clipboard Encryption
Encrypt sensitive text to/from clipboard.
Emergency Wipe
Panic button. Securely shred vault on demand.
Steganography
Hide encrypted data inside BMP images.
Search
Wildcards and patterns to find files fast.
Import/Export
Bulk import directories and export vault contents.
Backup
Timestamped backups of your vault file.
Compact
Reclaim space by removing deleted data segments.
Cat
Print file contents directly to stdout.
Keyfile 2FA
Optional keyfile combined with password for two-factor vaults.
Merge
Merge vaults (supports password-only or keyfile-protected).
Why does this exist?
I didn’t build Gecko out of dire need — I built it to learn and to have fun. Reinventing the wheel is funny until you realize it’s how we get better wheels. Innovation often starts with “what if?” and a fresh take on old ideas.
— The developer
How is it different?
Gecko isn't trying to replace VeraCrypt. It's a lightweight alternative with a different philosophy.
| Gecko | VeraCrypt | |
|---|---|---|
| Virtual disk mounting | — | ✓ |
| Zero dependencies | ✓ | — |
| Portable single binary | ✓ | — |
| Built-in secure notes | ✓ | — |
| Steganography | ✓ | — |
| Clipboard encryption | ✓ | — |
| Emergency wipe trigger | ✓ | — |
| GUI | — | ✓ |
| Lines of code | ~3,000 | ~500,000 |
Installation
Windows
Download the installer or portable executable from the releases page.
Linux
$ tar -xzf gecko-linux-x64.tar.gz
$ sudo mv gecko /usr/local/bin/
Build from source
$ git clone https://github.com/kpawnd/gecko.git
$ cd gecko
$ cmake -B build -DCMAKE_BUILD_TYPE=Release
$ cmake --build build
Quick Start
# Create a new vault
$ gecko create myvault.gko
Enter password: ********
# Add files
$ gecko add myvault.gko document.pdf
$ gecko add myvault.gko photo.jpg
# List contents
$ gecko ls myvault.gko
document.pdf (245 KB)
photo.jpg (1.2 MB)
# Extract a file
$ gecko get myvault.gko document.pdf
# Search
$ gecko search myvault.gko "*.pdf"
# Store a secure note
$ gecko note myvault.gko "API key: sk-secret123"
# Import/export
$ gecko import myvault.gko ./docs
$ gecko export myvault.gko ./out
# Backup & compact
$ gecko backup myvault.gko ./backups
$ gecko compact myvault.gko
# Securely delete a file
$ gecko shred sensitive.txt
# Create 2FA vault (password + keyfile)
$ gecko keygen my.key
$ gecko create myvault2.gko --keyfile my.key
$ gecko add myvault2.gko --keyfile my.key secret.pdf
See the full Documentation for all commands.