FiloSottile

    FiloSottile/mkcert

    A simple zero-config tool to make locally trusted development certificates with any names you'd like.

    59.9K stars
    3.3K forks
    501 GitHub watchers
    Updated Nov 10, 2026
    View on GitHub

    Build with Backblaze B2

    SDKs, agent skills, IDE extensions, and reference pipelines from Backblaze Labs. All open source.

    Explore Backblaze Labs

    Loading star history...

    Where it stands

    Rank, growth pace and release cadence relative to everything GStars tracks.

    The project lists 37 contributors on GitHub.

    Use Cases & Benefits

    • Creates locally-trusted TLS development certificates with zero configuration for any domain names.
    • Simplifies local HTTPS setup by automatically generating and installing a local CA in system and browser trust stores.
    • Use for enabling HTTPS on localhost and custom development domains without browser trust errors.
    • Use for generating client authentication certificates and S/MIME certificates for email testing.
    • Use for setting up trusted certificates on multiple platforms including macOS, Windows, Linux, iOS, and Android development environments.

    Should you depend on it?

    License terms, project hygiene and risks, from GitHub metadata and GStars' snapshots.

    License

    BSD 3-Clause

    Permissive: commercial use, modification and redistribution are allowed with attribution.

    Community files

    • README: present
    • Contributing guide: present
    • Code of conduct: present

    Watch-outs

    • Warning: No commits in over a year (last push Aug 2024).

    General guidance from repository metadata, not legal advice. How we score

    From the README

    mkcert is a simple tool for making locally-trusted development certificates. It requires no configuration.

    Using certificates from real certificate authorities (CAs) for development can be dangerous or impossible (for hosts like example.test, localhost or 127.0.0.1), but self-signed certificates cause trust errors. Managing your own CA is the best solution, but usually involves arcane commands, specialized knowledge and manual steps.

    mkcert automatically creates and installs a local CA in the system root store, and generates locally-trusted certificates. mkcert does not automatically configure servers to use the certificates, though, that's up to you.

    Warning: the rootCA-key.pem file that mkcert automatically generates gives complete power to intercept secure requests from your machine. Do not share it.

    On macOS, use Homebrew

    Excerpt from the FiloSottile/mkcert README on GitHub (BSD-3-Clause license). © its authors.Read the full README on GitHub

    Daily snapshots

    Stars gained per day, and how forks and open issues moved, from GStars' daily snapshots

    Forks

    3.3K+127

    Open issues

    178+1

    Compared with peers in iOS

    Fastest-growing repositories GStars tracks in this cohort for the week of Nov 8, by 7-day star growth

    FiloSottile/mkcert compared with iOS repositories by stars, 7-day star growth, health score and last release
    RepositoryStars+7dHealthLast release
    vercel-labs/agent-desktop21.4K+8.7K755 days ago
    anomalyco/hex6.2K+1.9K758 days ago
    nightly-labs/openbot6.9K+1.6K75today
    rustdesk/rustdesk128.9K+859751 day ago
    crmne/spotifast10.2K+524757 days ago
    FiloSottile/mkcert59.9K—75—
    Category median10.2K+1.6K75—

    Also by FiloSottile

    Other repositories from this maintainer that GStars tracks

    Discover Repositories

    Search across tracked repositories by name or description