
Clevis is a pluggable framework that enables automated decryption of data and LUKS volumes through a pin-based plugin system.
Checked October 2026.
Clevis is a pluggable framework designed for automated decryption of data and LUKS volumes. The framework operates through a pin-based system where each pin functions as a plugin that implements specific decryption logic.
The tool provides command-line functionality for both encryption and decryption operations. For encryption, users can execute commands to encrypt plaintext data into JWE (JSON Web Encryption) format. The decryption process reverses this operation, converting encrypted JWE files back to plaintext.
Clevis utilizes a configuration system where JSON objects are passed to pins to establish the necessary parameters for encryption and decryption processes. This approach allows for flexible automation of decryption workflows without requiring manual intervention.
The framework supports LUKS volume unlocking, enabling automated access to encrypted storage volumes. This capability is particularly useful in scenarios where automated system boot processes or service initialization requires access to encrypted data without user interaction.
No core features are listed for this product yet, so check the vendor's documentation for the full feature list.
No integrations are listed for this product yet. Check the vendor's documentation, or ask the vendor which integrations and APIs it supports.
Common questions about Clevis: features, pricing and alternatives.
Clevis is a product in the Key Management category. It covers Encryption and Linux.
Clevis is free. Download and setup instructions are at https://github.com/latchset/clevis/.
Alternatives to Clevis listed on CybersecTools:
Compare all Clevis alternatives at https://cybersectools.com/alternatives/clevis
Clevis is available as on-premises software. It is listed for startups, small businesses, mid-market companies and enterprises. It is free.
Side by side: features, pricing model and the company behind each one.
Microsoft Azure service for safeguarding cryptographic keys and secrets.
Microsoft BitLocker is a Windows-integrated full volume encryption solution that protects data on devices through disk-level encryption with enterprise deployment and management capabilities.
CSfC-aligned DAR protection via hardware/software encryption for defense & ICS.
Developer-centric API-based data security and encryption platform.
Central key management that enforces key policy across apps, clouds and HSM vendors.
KMIP SDKs enabling standards-based enterprise key mgmt in vendor products.
On our shortlist?
Clevis is not a pick on the current Best Key Management Solutions for Business.
Get a summary of this page from your assistant.
Mandos MCP: ask about all 9,033 products.
Connect your AI